I think if I was any project leaving sourceforge, I would try and delete as much as possible, including the user account. Failing that, I would upload as the last release an "installer" that just gives notice that downloads through sourceforge are no longer supported due to their scammy behaviour, and a link of where to get the valid download.