SF should lease some space in their datacenter for a server or two to be used as a proxy server to some other company. Make sure this proxy server is locked down to only offer SF - not the whole Internet. The additional bandwidth in doing so would be 0.
Keep the proxy anonymous and open. This way, you keep access to SF officially locked down, but the proxy server is still going to be accessible to the rest of the world.
I know it won't happen, but it would be nice to see SF take the stand based on its principles as an open source community member.