It's a cat and mouse game. At the same time, though, it means that botnet operators (provided that they don't roll their own crypto) have to engage in that much

It's a cat and mouse game. At the same time, though, it means that botnet operators (provided that they don't roll their own crypto) have to engage in that much more effort to keep their C2 infrastructure secret. That's a win for security teams, and it's definitely more effort on the attacker's part than it is on the defender's.