Yes, ICANN hostnames can be canceled and the TLS cabal can refuse to sign (and even revoke, although not all browsers look for revocations).

Geek solution: Use decentralized raw IPv6 on a mesh vpn like Cjdns, yggdrasil, pinecone

Normie solution: Create alt TLDs on Namecoin, (normies point their DNS to an alt root). Maybe some genius will figure out a workable way to register hostnames under a NOSTR tld using Nostr. E.g. you simply post a DNS event on SSB for the SSB tld. However, that scheme is not globally consistent. (Which is consistent with the SSB mindset - who cares about global consistency?)