> uses such primitive internet basics that it will almost certainly never fail.

It already fails in China and Russia. Simply tunneling HTTP through SSH is too easy to detect with DPI.

> Windows (which afaik doesn't have an ssh client built-in)

It has had both SSH client and SSH server built-in since Win10.