The Chinese firewall seems to be able to detect VPN packets (not decrypt, just detect them) and drop them, so even trying to connect is annoying.

I guess people could use SSL VPN and pretending to be HTTPS, but the detector might be able to detect patterns and realize it's not HTTPS traffic.