Who decides which op_return is bad enough to require an invalidation of the said block?

That is not a decision that can be unilaterally made by anyone. It would presumably be something sufficiently terrible enough to cause enough people to come to the same conclusion.

As mentioned above, this is a terrible scenario with no ideal solutions.