(1) Deny that they & their biz model are an attack vector.
(2) Move forward without permission & hope US gov doesn't crackdown.
(3) Lobby gov for a favorable result.
(4) Comply if forced.
(5) Hope to compete against distributed alternatives.
If you're going to break US regs, you should have a plan in place that isn't just begging regulators to spare you. It's impossible for that plan to include an ROI for VCs.