This seems easy enough to solve. Every time the football oligarchy catches too many IPs in their dragnet, you can accidentally drag all the legitimate football exit nodes into your DNS blacklist. The only way to be sure DNS doesn't work for pirated football is to ensure it doesn't work for any football.