All a website would need to do is tunnel the entire site through a proxy that rewrites all of the asset and other same-site URLs so they are all the same type of synthetic token or hash. This would remove the ability to do host or URL based filtering, forcing ad blockers to download every URL and try to classify by content.
This isn't even a particularly complicated change, and I've seen it done before (circa 1997). As for how this impacts the ability to play the current "ad bidding" game, that is trivially solved by 3rd (4th?) party proxies.
Ad blockers can be inconvenienced even more by making the content unique every time it is sent by the proxy, preventing trivial matching by file hash. The end-game of this type of strategy is having the proxy serve up a single opaque block of WebAssembly code that renders the page to a using custom and/or obfuscated font rendering.
This is almost certainly a stupid way to run a website, but I expect people that feel they are under attack from ad blockers to fight back in any way they can. Some of them are already trying to make up "moral" arguments (and legal wishful-thinking) against the recent increase in ad blocking. Obviously this won't work in the long run, but people that feel they are under attack are not know for making rational decisions.