I think that we have to go with regular domains here. Allowing a user to specify a sub-domain would mean that someone could load test their new blog at random-haxxor.blogspot.com and effectively DDOS Blogger/Google.