Problem is there is no way to prove the majority chain has seen a transaction since it refuses to acknowledge it. The minority chain could include the censored transaction, but the majority chain could include more new transactions. There is ambiguity over which chain is the truth and so the Longest Chain Rule (LCR) kicks in and the majority PoW chain is the winner.
The chain selection rule is the problem here. You'd need a new one to deal with this - it would somehow need to take into account the greater set of all transactions; since censorship necessarily is exclusive, the true set of all transactions would always be larger than the censored set, such that the minority would always have the ability to include the attackers transactions along with the censored ones. However, quite how you combine this with the LCR is unclear at worst and maybe impossible at best, because the minority by definition has less hashing power than the majority.