Also, let's just assume that a bad actor would have access to reasonably sized and geographically distributed botnet... they could easily run their own global connectivity tests to get a good picture of what the actual impact of their actions were.
Is it any information the Russians (I presume you mean) don't have yet? It's naive to think they don't understand how the internet works, given they've been doing active cyber warfare for a long time now.