There are plenty of ways to circumvent whitelists, such as domain fronting. Some are already battle-tested in China and we'd be happy to share them with the rest of the world.