It's like all theft. At low enough risk, the thief doesn't care what percentage of the value (of the $ charged) they recover. In this case, they are running very large CPU (not GPU) instances on someone else's dollar, not caring about the inefficiency of it because it can be automated and is difficult if not impossible to trace.