As a Russian, as soon as the whole thing started back in February, I installed my own OpenVPN server on a OVH instance in Singapore linked to a bank card issued to a friend in Germany (he's nice enough to pay 5 euros/month for me at no cost), and so far it's worked well - public VPN's the government knows about can be banned, if a VPN service is foreign it can be difficult to pay because of sanctions on my Russian bank, and my setup has been pretty stable, although some sites recognize it's a cheap OVH istance and block it.
So far, in my experience, the problem has been not as much about Russia's censorship as about Western sites blocking access to Russian users just because - on a good day I can bump into a dozen of such sites (by default I surf with VPN disabled).
Another option is to set up a couple WireGuard peers on a VPS and send the config(s) over Signal or other secure means to Russian friends and or acquaintances.
Sure, I'm aware of spam and alike, but it used to be much rarer before the invasion, so I concluded it must be part of the broader protest against the invasion (which includes companies leaving Russia). Now even some obscure technical blogs often return 403's. Some sites, upon detecting you are from Russia, also show the Ukrainian flag with some political message instead of the usual content, which go away if you switch to VPN.
So far, in my experience, the problem has been not as much about Russia's censorship as about Western sites blocking access to Russian users just because - on a good day I can bump into a dozen of such sites (by default I surf with VPN disabled).