> They can start by not offering iCloud services in China.

Even better, they could only offer end-to-end encrypted services in China so that the datacenter operators can't track more than the ISPs already can.