my personal pet theory is that china could in principle block whatever they wanted, but, decide instead to block only sometimes and with some random noise thrown in, if only to impose a tax or cost on trying to connect out but to have some plausible deniability on not having it be impossible while still retaining the option of turning the dial to 11 if/when need be.