They'd need to run a VPN with end point in a less hostile country and so there's an element of enforcement on those endpoints.

At any rate, blocking China and Russia isn't ever presented as a foolproof defence, it just raises the barrier to attack.