We ended up launching another droplet, setting up a reverse proxy from the new droplet to the blocked droplet (which was still accessible via internal IP), and updating DNS to point to the new droplet's public IP. At least that way we were not down all weekend. Nevertheless, we decided that DO support's kill-first-ask-questions-later policy was completely unacceptable.