The state of the art, "xray-reality", is not blockable. It's a legit tls connection with data smuggled inside it.
EDIT: I might be confusing vless/xray/reality but seems like there are no problems to block it based on ip reputation + tls fingerprint + amount of connections https://habr.com/ru/articles/1044396/
Of course this would block some valid websites but when has government cared about that
If you are willing to block browsing all ordinary web sites fronted with a CDN, then yes you can block reality/xhttp. You cannot, however, differentially block it via any of the three things you mentioned.
The government (any government) hates its citizens and the freedoms it had to allow them