Malicious actors are now harder to distinguish than legitimate actors, since they both will use VPNs. This is because in essence what VPNs are used for is always to evade the law, regardless of whether it is a law with high approval, like CASM, malware, spamming, drug trade; or laws with high approval for breaking them, like pornography age verification laws, or Intellectual Property laws on movies and music.
This is regardless of who is to blame for this issue, some will argue that it's the fault of those that break the laws with VPNs, some will argue that it's the fault of lawmakers for making stupid laws that deserve to be broken, muddying the waters. Undoubtedly, the third party, strong criminals, will make or amplify propaganda to legitimize breaking small laws, so that they can have legitimate alibies for breaking the law.
It’s already done a bit voluntarily. Try to use a VPN and pay for something with a prepaid credit card. Try to make a Steam account. Etc.
Get ready for a verified ID that’s required to access anything online because that’s the end goal.