Sure, but there’s still no link between what the botnet operator charges and what ISPs charge for bandwidth, that’s the point I’m trying to make.

Because the botnet operator is not paying for the bandwidth, directly or indirectly.