It's not necessarily to DDOS. It could be used for massive amounts of scanning. Google routinely blocks exit nodes for large numbers of search queries. The NSA could also be watching exit nodes for scans/queries/attacks/connections to sensitive targets, government computers, terrorist forums, etc.