Lack of security measures is no excuse
Nobody is forcing them to use outdated "IP blacklisting" based "security".
If they lack the kind of technology to filter out bad traffic without just displaying CAPTCHAs all over the place, it's their own lame fault.
El-Reg is more than welcomed to check better solutions.
Disclosure: I work for Imperva Incapsula.
Biting the hand that feeds IT
