Only commercial VPNs? So HTTP proxying, Tor, SSH tunneling, SOCKS tunneling, running your own VPN node, etc are all allowed? There's plenty of VPS hosting companies that don't need ID or proof of age to sign up. Even if the UK requires this, you can just sign up for a server outside the UK.

There's also weird approaches that work but not many systems catch, like tunneling stateless data (like HTTP responses) over DNS TXT lookups.

When I was in high school in the 2000s, kids figured out how to bypass the internet filtering at school. Kids these days have way more resources available to them, making it even easier to do.