I once accidentally moved the cgi-bin (long time ago) on one of Swedens biggest websites. moved it back pretty quick so it was "only" down for a couple of seconds.
They did pay.
"The first attack was tied to a ransom of 15 bitcoins (roughly US$6,000) which ProtonMail eventually paid due to pressure from ISPs and other companies affected by the attack."
https://en.wikipedia.org/wiki/ProtonMail#2015_DDoS_attacks
Well that can "easily" be solved by giving you a private key to use for your banking and e-com usage. Then "they" can decrypt it with ease and you stay "safe".
Probably. Imagine having children. Streaming (up and down), videochatting, gaming, torrenting, downloading patches and so on. They will not hit 1Gbit/s all the time but when everyone is on the net at once it will be nice to have some "room".
First of all you can do a whois on an IP address to get where the company that registered is located.
If you traceroute the address you can sometimes get hints on where it is.
And then some big sites may use geo locotation services on their websites that query the browser/APP GPS where the user is located and then it may be concluded that the whole /24 net is within that area and then the site will sell this information to geo location services.