The people harmed by them are too small to fix it, and the people big enough make more money selling DDoS mitigation.
From what I understand you can avoid many DDoS just by going IPv6 only, because DDoS mainly depends on unpatched shitmachines from the old days.