It isn't an issue of expensive mitigation devices.

Even expensive and large hosts like Softlayer will null route you.

They just don't want to pay bandwidth or go through the hassle of asking their upstream providers to filter the attack for them.