They need to switch to a complete distributed architecture. Where the site, the tracker, everything is hosted by users. This way, no corporate tools can target them.

The "how" is much more complicated though.