In these days of concerns over digital sovereignty, I cannot help but wonder if they would be best served by moving to a privacy-protective European state, e.g., Germany or Switzerland (not EU but tends to align with EU regs, e.g., GDPR) and doubling down as a privacy protection service (to the extent permitted by law).
Just musing....