The way I understand it, any company wanting to do business in the state would have to block access to their services from (anonymous?) VPN providers. That means IP blocks for PIA, mollivard, etc will be blacklisted by companies. There are already blocklists of IPs for VPN providers that many corporate web filters use (yes, they are terrible and inaccurate).
Yes, you would probably be able to fire up a VPS from a no-name provider and get through. However,
- a) that option isn't really available to 99% of the tech-illiterate public,
- b) a lot of sites already have issues with non-residential IP blocks, especially AWS, and
- c) that usually means there is a 1:1 mapping between your IP address and your identity (often a credit card). Which is what they want.