Re: There is always the old fashioned way
"Not much they can do about that one...."
They can implement their own DNS client in Chromium/Chrome instead of using the one from the OS. This can then ignore the "/etc/hosts (or whatever it is on your O/S)" and always resolve anything google.com. They can even decide to encrypt it so a network based filter cannot interfere with google.com hosts name resolution.
BTW it was mentioned earlier in the comments - DNS over HTTPS.