But for such a "proof of power" a short attack which takes the service down once is enough, long attacks are not so common and actually require some work from the attacker

If the attack doesn't last long, bystanders can't know whether it was trivially mitigated by the victim.

A shorter attack won't make as many news headlines, either.

Unless part of the social proof is that mitigation is more difficult.