Penalize Exit nodes which using censored/filtered DNS servers
Some Exits are now using following DNS. You could detect them by resolving domains which blocked by Adblocks (e.g Google Anal)
- dns.adguard-dns.com
- Cloudflare Family DNS
Isn't your tule disallow nodes from "editing" requests?