Providers are hesitant to block IP addresses for a multitude of reasons, one of the simplest ones being that different services can run on a single IP.

And running DoT on a non-standard port breaks all sorts of things because it will be ... non-standard.