There are also countless ways to evade this: iodide (tunnel over dns), encapsulating encryped traffic in non-encrypted http, etc. DPI just makes it harder, so

There are also countless ways to evade this: iodide (tunnel over dns), encapsulating encryped traffic in non-encrypted http, etc. DPI just makes it harder, so does terminating ssl earlier, or blocking outbound ports.