> that is going to hurt people way beyond PayPal

That's what I meant by broader and deeper impact. If service is impaired for merchants, a fraction of them will switch their payment provider.

I am not arguing this is the right thing to do from moral standpoint btw. This just got me thinking about DDoSes for the first time. Would be interesting to hear what the security experts think.