Comment by CreepyHunterX

DoH allows this to be bypassed, as they operate over port 443.

However, DoT uses a separate port (853) that can easily be blocked entirely, whereas filtering DoH requires relying on SNI or lists of IP addresses.