All it takes is Square and Stripe preventing CC transactions from known VPN node IP addresses to de facto make that happen; they're like the Cloudflare of ecommerce