DNS blocking is a paper wall indeed. However, this is just a step one. VPNs are already a target, so this will help them with justifying step 2 - introducing DPI to monitor all traffic and proactively block new VPNs and other obfuscation methods. Step 3 is more or less final, it's when they realize this is also not quite as efficient as they'd like and they'll get tired of the constant cat and mouse game, so the solution would have to be whitelisting approved websites and blocking everything else. It's amazing for billionaires and their corpos as that makes it nearly impossible for new projects to enter the market, and it's great for governments that desperately want to be authoritarian, but pesky constitutions, privacy laws and some such are getting in the way.