This would probably false positive every CGNAT IP, or am I misunderstanding something?
If there were people under the same CGNAT with someone running one of those exit nodes, then that's not a false positive.
Hidden from the user and provided by the ISP