Anyone can set up a secure tunnel that bypasses the filter entirely. It's not technically challenging, and the setup is very well documented. This is another gap.

Can you elaborate on this point.