EFF has a similar article: https://www.eff.org/deeplinks/2026/04/utahs-new-law-regulati...

The bottom line:

> if a website cannot reliably detect a VPN user's true location and the law requires it to do so for all users in a particular state, then the legal risk could push the site to either ban all known VPN IPs, or to mandate age verification for every visitor globally.

Clearly anyone slightly sophisticated can bypass restrictions like this. A quick search reveals https://github.com/shadowsocks. This only harms regular users who might benefit from privacy. The dystopia levels continue to rise...