You're assuming the owner rented the VPS to run the but but it's more likely intended for something else and is infected with malware / some intern being cute. After all there are cheaper plans than DO.
Nah, DO offers free credits so threat actors just keep abusing that, it's really easy to make (or buy) tons of fresh trial accounts.
Even if you do the PayPal way and pay $5, that's still better specs and lasts longer than what you get with a $5 VPS, because the trial credit is $200 for a few months (or if you go the commonly abused method: GitHub student, you can get $200 for a year).
And then combined with poor anti-fraud, poor abuse handling
And I was also not just guessing when I said those things, I have been in those circles previously.