Well if you want anyone to legitimately blame for DDoS attacks...
1. the person or persons that initiated it.
2. people that do not maintain a secure computer by keeping their OS and security software up to date while foolishly downloading things they shouldn't be or visit websites they shouldn't be. DDoS attacks are often executed by computers that have downloaded unwanted software the user isn't aware of.