This hinges on how the DAO could actually acquire the domain. If Ethiopia requested it be delegated in the global root as a ccTLD, and appointed ENS as the registry, it’d be possible to reflect the entire .eth registry in DNS, because we and Ethiopia would set the rules - no UDRP if we don’t want it.
If it was instead relinquished by Ethiopia and issued as a gTLD, ICANN rules would apply, names would be under UDRP, and there would need to be some kind of decoupling between owning the .eth on ENS and having it reflected in DNS. In that scenario a purely defensive option of holding but not using it might be more attractive.
I think “proactive” is a better term than “offensive”!
So much of this is uncertain at this point that it’s hard to speculate on what the end result might be.