Masking a WebTunnel bridge behind an existing URI

You are right. There is no big difference.

Btw

URLs cannot be blocked, because there is no such thing in TCP/IP.
URLs can be available on a higher level protocol, but since higher level protocols are TLS encrypted nowadays, no way for a censor to obtain the HTTP request line.

What can be blocked is the IP address.

I will test the following approach now:
Dynamic DNS combined with distributed proxies a la snowflake.