Non-approved VPNs used to circumvent the great wall are absolutely illegal, though largely tolerated (and observed), but the authorities can and have used them as an excuse to bring people in.

Source: have actual been to China and played the whole "which VPN will work on which network" game many times.