Fair question, but I'd imagine it's not worth spending time migrating users to a different system if the attacker can simply update the servers they're targetin

Fair question, but I'd imagine it's not worth spending time migrating users to a different system if the attacker can simply update the servers they're targeting to follow you there.