I don't think a lot of businesses could operate without VPNs. It's essential for secure remote work. I'd have to imagine the amount of lobbying against it would be quite strong

It is essential, but never underestimate government's ability to completely screw everything up with regulation. Source: "do you accept these cookies?" when device fingerprinting exists.