DDoS attacks basically are still a thing because there's nobody really incentivized to solve it.
The people harmed by them are too small to fix it, and the people big enough make more money selling DDoS mitigation.
From what I understand you can avoid many DDoS just by going IPv6 only, because DDoS mainly depends on unpatched shitmachines from the old days.