A lot of times these are botnets. Think your grandma’s old Dell with a ton of malware - times 100. Proof of Work helps if you’re the one on the hook for bill, but if you’re a malicious actor you don’t care about power costs for me-ma.