I think they do shut you out if you try to spin any process through "unauthorised" means. There have many projects that offer automated setup of SSH/VNC/VSCode on a colab instance, and my experience has been that colab somehow is able to manage to shut off the connections soon after I start them.