Gists and other subdomains are still blocked, but the APEX is available. This is one of those cases where ECH would really make sense: the censor is forced to

Gists and other subdomains are still blocked, but the APEX is available. This is one of those cases where ECH would really make sense: the censor is forced to choose whether to pass TLS connections to an IP or not.