This raises an attack vector for Hetzner's business itself. By finding their larger clients and DDOSing them, Hetzner's business itself becomes at stake.
Yeah exactly, that's what I thought. If this is the way Hetzner deals with even such small attacks, some competitor that has enough power could potentially take out a lot of their clients and Hetzner would get the bash.