They at least use different domains for user-uploaded data. e.g. googleusercontent.com and you could go even further by giving each user their own subdomain. That at least gives block lists the possibility of blocking a single user at a time.