GFW has been all layer for a long time, including actively re-probing and connecting back to a server from random (really, virtually any CN IP space).

HTTPS is somewhat secure, but subject to MITM. Most Chinese forks of browsers ignore certificate errors and allow everything through.