Am I reading this correctly in that this uses TLS - and ends up tunneling TCP and UDP over TCP?
The 'double congestion-control' effect can be alleviated by opening 10 or so TLS connections and pumping the packets down those, to spread the effects of TCP congestion control.