They should run a DDoS on bitcoin.org mirrors :) haha For example https://bitcoin.anyone.eu.org/ If Cobra needs a hand, she can call for help. But /me thinks they're doing just fine.
It is quite easy to do an unhackable server at home. All the exessive packets get just dropped. And in case of DDoS the ISP might be interested as well (it's their network the attacker is making busy). All one needs is to restart router and viola, there is a new public IPv4 address. Dyndns with https://dns.he.net makes it very easy.
And even easier is to host totally for free via Cloudflare on (sic) IPFS… (see above-mentioned bitcoin.org mirror)