I think the traffic gets proxied (not sure if it's encrypted) back to servers run by your home carrier. So conversely if you use a China Mobile SIM in Hong Kong

I think the traffic gets proxied (not sure if it's encrypted) back to servers run by your home carrier. So conversely if you use a China Mobile SIM in Hong Kong or overseas your traffic gets firewalled.