What gas-fees is Tether paying to update the smart-contact with a new list of banned addresses? Less than the amount of dollars cancelled I guess, but need that be true? Is there a hack here to get enough addresses banned they have to lock up the blockchain with banning addresses?

I think you answered your question. They can just call an API to see if an address is banned. It's easy peasy when it's centralized.