Apps:

- First they'll close 3rd party app stores (developer KYC and user KYC)

- Age limits for apps

- Banning of apps (if user tracking is not implemented)

- 3rd party OSes can be criminalised but are hard to stop completely

Web:

- Web is harder to limit. What we've seen so far: Cloudflare being banned in Spain, DNS bans of websites, Raids at providers

- at some point VPN apps might be banned

- Custom DNS resolving

- Final level: Great firewall (of china)-level blocking

Tor:

- Attack on exit nodes, maybe?

Unfortunately many regular people support measures for more control over the social media monopolies and age restrictions for minors. They are already KYC'ed everywhere and have no awareness for the benefits of anonymity.