Really? If I execute a script that DDoS someone, presumably it should not be treated as "speech" as if it is a protected right. That's such a hilariously slippery slope since you can arguably do "anything" via executing code.
Of course as a practical matter it can be difficult to prosecute DDoS attackers under that statute. Either they don't leave hard evidence, or they hide in countries which don't extradite.