Only a very few fallback nodes are persistent over time, and compiled (hardcoded) into the bitcoin client itself.
This is security hole.
State can block outgoing 8333 port for all hosts except for hardcoded addresses. On hardcoded addresses they can set up fake bitcoin nodes. Then these nodes will give you the addresses of a dummy nodes to create the illusion of a bitcoin network.
So they are force you to spend your own money from a bitcoin client in their favor.
Better in the case of network problems ask the user to specify the address for the bootstrap. This address can be obtained from reliable sources, verified by the user.