What we need is some new DNS root hosted in international waters or smth.

Or, by how things are going, distributed DNS rooting (DNS is already distributed, but the root is under control of fascism-adjacents).