Could the RESTRICT Act criminalize the use of VPNs?

Could it? Yes, it could. Every CFAA and related law can be stretched as thin as a prosecutor wants it to be. Look at USC 1030 for a great example.

This won't be any different.