Right now with how the attempts are structured everything happens at the TLS level, which means anyone wanting to enforce that would require access to the SSL private key. ISPs and other actors already have the toola via DNS and IP blocking to enforce what they want.
