> Next up is DNS, I guess? And after that, routing.

Alternatively (or additionally) they could move the damage from the server side to the client: think OSes and browsers, not to mention hardware. It won't be long before "secure boot" technologies prevent people from installing "extremist" operating systems.