I'm not sure there's an easy fix for this problem. Invictus can't put AGS on a blockchain until after the donation period ends (July?) because they committed not to. Another solution would be to allow people some secure method of moving their donations to a new address, so to speak - changing their donation address.
But that's not a solution at all! How would it work? If I control the private key of my donation address, I can securely and permanently associate my donations with a new address. But if my private key is compromised, the attacker can securely and permanently take control of my donations.
Maybe I'm thinking about it too simplistically, but it seems like it's just a hard problem that people are going to have to deal with.