They already do and will reject a request if the domain has a CAA record that does not list LetsEncrypt.
Not a member of The Register? Create a new account here.
Remember me on this computer? Post anonymously?