> They could try, but not even China could build an impregnable firewall.

They can learn from Russia. Censorship in Russia now surpassed China. TSPU are now in every ISP facility. They pass all traffic through them and allow arbitrary bans of specific resources/protocols/etc in specific cities or whole regions.