except it is literally a VPN, actually. That's why it would have that characteristic. Except actually it wouldn't, because the test described only catches proxies at L4 and higher. It would catch a lot of CGNATs.