That's why a said static webhost, i.e. paying for the ability to serve files, not run scripts or manage the webserver configuration. Sure, the hosting provider could be made responsible for the implementation, but now they have been encumbered with the burden and liability of policing which hosted sites needs this bullshit enabled and which are just a blog about making strawberry preserves or something.

Point is, it's complete and utter twattery of the highest order. Never mind enforcement, I don't even see how it would be reliably or consistently implemented.

And all that is in any case absolutely futile, because there's still the matter of people being perfectly able of obtaining those self-same ISO's from any number of other sources that are even more difficult to police, like the ones I originally mentioned, and about a thousand more where they came from.