Encrypted Client Hello is the mitigation to that, IIRC it hasn't rolled out yet, and if it does then the GFW would probably just block connections that use it.
ECH is on by default for Cloudflare’s free plans, and paying customers can adjust the setting. That’s why CF already has an interesting history with the Russian authorities [1] (The discussion is short but has a lot of interesting details)
