So they have to update the smart-contract in order to block the addresses?

What if there were so many addresses that the smart-contract can't hold them all? Is there a limit on smart-contract size?

Or maybe the smart-contract can call out to ask the Tether server if it's okay?