Cloudflare mitigates a record of 26M request per second DDoS attack

Why would anyone DDoS a website insignificant enough to be using a free CF plan?

Are all those infected machines, that create the DDoS attack, tracked and labeled? I.e. is their cover now blown? Or do they live on to attack another day?