I don't think it's true that UDP is completely unfiltered.

I tried setting up a Wireguard site-to-site tunnel for $WORKs Chinese office to access EU office- it stopped working within a day.