That's a creative interpretation by NPR. The law doesn't mention VPNs. The law bans:

> provid[ing] supportive services to a prediction market or consumer knowing that the services will be used to identify a consumer’s location, transfer money, or make or process payments for the purpose of allowing consumers to make wagers or to settle wagers made by consumers in violation of this section.

"knowing" is key here.