Heuristics again. 99% of your traffic is going to one endpoint... and it's hundreds of gigabytes, both up and down. Obvious red flag. Even an automated system could throttle it.
That step of the cat and mouse game is over a decade obsolete.
If I spent a week setting up a VPN provider, I’d start with this: 99% is spread across 100 endpoints, 55% are cloudflare, and 45% are amazon/azure/google.
A special client mode would check for non-blocked IPs in your country and have those bypass the VPN.
The government doesn't care... because no 16 year old is doing that or can afford that. And if one VPN provider did that, that specific VPN provider can have all their endpoints manually blocked by the government. In which case, the objection is irrelevant.
Also, heuristics again: 99%+ of your traffic is going to the same two or three companies only. The owners of the endpoints are not very diverse, which is statistically extremely unlikely. Throttle you to 0.5mbps, so you won't be watching anything, and call it a day.
Countries like Iran and China have been trying to block VPNs for years, and all they are doing now is heuristics.
For example I can tunnel traffic over a TLS tunnel. How do you distinguish that with everything else?