It's much less hard than you think, we just think it's hard because we are engineers not lawyers.

Proxies have limited and expensive bandwidth and couldn't launch a DDoS anyway because incoming traffic equals outgoing traffic. They are innocent here. You need a DDoS software module to make a DDoS.