SNI is enough to classify traffic for enforcement purposes. dont forget that if certain SNI is detected, your ISP/government may try to force downgrade TLS or

SNI is enough to classify traffic for enforcement purposes. dont forget that if certain SNI is detected, your ISP/government may try to force downgrade TLS or replace server-hello with their own cert - meaning you will need to install government certificate to browse certain websites and 99% of users will do that to get access