It's just an assumption that residential proxying hasn't become a legitimate industry by now. Security professionals just assume it's still based on botnets.