The reason is that it's easier to block bot hosting providers. That's why illegal botnets rely on compromised personal machines.