> Wondering why anyone is still using ip-based geolocation

I don't think there's a reasonable alternative. If you ask users for their location they can just lie, if you use the JS geolocation API they can trivially deny or spoof it. If you base it on billing address you're locking out people who are traveling, which seems unwanted (especially for long-term travel).

So instead they end up playing a cat and mouse game to try to block VPNs.