Mastodon handles this almost perfectly. No one can take down an ActivityPub server, but moderators can choose to not sync with hostile actors. If the users disagree with the moderator's decision, they migrate to another host and take all their data with them.