The user might have angered someone with their website and it might well have been targeted to them instead of Netlify as a whole? I can imagine them using that point in a court if that was the case.

They wouldn’t really get anywhere with that claim though, even if it were true when they could find evidence, because the company claims that they actively scan for and protect against this sort of thing, and even they admit that it was a DDoS attack.