Students figure out how to dodge any website blocking schools put into place. It just takes one kid to figure it out, then it spreads through the whole school, and pretty soon everyone is using a sketchy free VPN that might be doing man-in-the-middle attacks or running a crypto miner or whatever.

The only real solution is parental (and teacher, in the context of schools) training and supervision. Anything else and students will figure out Tor, or VPNs, or private trackers, or pirate streaming sites, or random sketchy websites (depending on what they're trying to block). It's futile, and encourages students to do unsafe things to get around the blocks.

This will be no different. There are hundreds of ways to avoid this. For a high-profile example, see "VPN" search trends in Utah after porn sites geoblocked the state of Utah.