But they already use VPN to hop over their own firewall. Double firewall will not change a thing.

I can spoof my address in 1 second. Are you saying that Chinese hackers and trolls cannot do the same?