How is it not decentralized?
Traffic is flowing through computers of volunteers, that part is indeed decentralized, but your client needs to find them, and that happens through a centralized service, through a “directory authory” if I’m not mistaken
Here is the list of the currently available directory servers: https://metrics.torproject.org/rs.html#search/flag:authority
This article claims that their list is hardcoded, but honestly I’m not sure right now whether it means you can change it.
I2P has a mechsnism for banning routers, permanently or temporarily.
It looks it knows what to block from a local blocklist file and from a “blocklist feed”, but I don’t know what’s the latter right now. I hope you can excuse me on that, I’m also quite new on the topic.