> This fundamentally doesn't work because internet is not something existing in a vacuum - you need wires, fibers and servers to make it work, and those are located in somebodies jurisdiction.

The reason it works is because there are numerous ways of hiding traffic at various layers.

Eventually it will probably be feasible to do DPI on every single packet and prevent that, but at the moment it's quite doable.