Google is probably right to not go down the hard-coding path. Hard coding the offenders doesn't work. You block a domain, they changes names. You block an IP, they switch to AWS so that your choice is to block all of AWS or not block them.