If an attack or abuse comes from a CG-NAT address they have to throttle the IP and all the customers behind it.