This isn't actually a change. It has always been this way so I've heard. Lag switches/IP flooding I heard was in fact ban-able, however, modded controllers aren't.
The problem has always been 'proof.' Microsoft can't get the proof that you are using a modded controller since you aren't...