It is good to know that blocking unused TLDs is still a good idea. It is not like I would ever visit .es or .ru
Blocked it - job done. What a typical over reaction. When this campaign is over they will move to another country TLD. There are 243 national top-level domains are assigned, with 195 of them reserved for independent countries and 48 are owned by dependent territories. How many do you block before you realise you boarded the wrong train?
It's not necessarily an overreaction. There are currently more than one hundred entries on my list of blocked of TLDs, .es just being one of them.
Once they realise that they are not getting an acceptable success rate they will move on. They may move to a new TLD. Perhaps an .me or a .ch. You will, of course, have the option of also blocking them. Let's just hope that you, or any of your friends don't use ProtonMail. Proton Mail offers a variety of email address domains for its users, including @proton.me, @protonmail.com, @pm.me, and @protonmail.ch. The default domain for new accounts is usually @proton.me.
I don't use Proton Mail, so blocking .me and/or .ch would not cause any problems here. Apart from that, I could still use proton.me/.es etc. even if I blocked the TLDs .me and .ch in my browser because I use an email client for handling emails. And if I used Proton Mail in my browser, I could still whitelist proton.me/.es etc. So there are plenty of options here to choose from.