Its because Nintendo isn't smart enough to track the IPs people use.
On a more serious note, CDNSP uses a console's certificate. It could be yours, one from the Internet, or your grandma's; it does not matter where it comes from but the cert needs to be there. And when they ban or CDN ban certs, it is applied to that cert and that cert alone.