It's easy to block that default VPN (or directory server). I don't think there's an easy way for Apple to get around it. IP protocol is too easy to block. I think that it's possible to develop better protocols where every peer will proxy packets if necessary, so it'll be impossible to block it, but that's probably not something that'll replace Internet.