Could ISP be responsible for attacks coming from some of their infected users? Shutting down someone's internet for 'abusive use' would be a good incentive of getting incriminating devices out of the market.