I think there's at least one clear line between DNS providers and your examples. In your examples the enjoined parted is providing being a tool - a thing someone else uses - not a service where the enjoined party themselves does the thing.

It's one thing to say that you can't CNC machine guns for customers of your CNC-on-demand service, it's another to say you can't sell CNC machines because someone might use them to make guns.

Here the DNS service is being told they can't direct traffic to pirate sites, not that they can't give out tools (e.g. browsers or local DNS resolvers) that could be used by someone else to direct traffic to pirate sites (or could be used innocently). Your examples are all the latter - tools.