There are other ways like deep packet inspection.

But I mean, if they really want to dump any quiery going to and from a relay, they can.

It will be a cat and mouse game, but it already is.