[croshan]

real users have more CPU than a literal toaster (or smart air fryer, or IP camera, or many other common botnet devices)

[AnthonyMouse]

Not only that, real users actually want to use the service, not overload it. A real user might only make one request a second. A botnet device is trying to make a thousand requests per second to overload the server. Even if they each have the same CPU as a normal user, now each node in the botnet can only make as many requests per second as a user or the user can outbid them.

[KirillPanov]

^ this guy gets it