I don't understand why they are just starting with the assumption that all of the bot traffic would just go straight out to the internet from their ASNs

If it were a professional operation, the first thing you would do would be to not give away the source of where the traffic is coming from and route the traffic through an intermediary.

Do you think at this point you’re just looking for reasons to believe?