If you read carefully, you may see that they did not say that "VPN traffic is being blocked because it's malicious"

Because I've hosted websites where blocking datacentre IPs has caused a massive reduction in spam and malicious activity - and tried to use Google search with Mullvad dialled only to be greeted by a CAPTCHA every other search.

As someone who operated a high fraud target during the pandemic, I am comfortable asserting that while not all commercial VPN traffic is fraudulent or malicious, most fraudulent or malicious traffic is over VPN.

Because it absolutely is.

I occasionally fire up Mullvad when I’m on the go. I get blocked way more often when I use it

Because people run crawlers and perform illegal activity, and/or because ‘security companies’ sell the IP lists as low reputation potentially malicious IPs?

It's the same with any broker service. Fire up a Hurricane Electric IPv6 tunnel for the same effect.

Anyone who has browsed through one of these personal VPN services - or even a DIY VPN from a datacentre IP - for more than about 10 minutes will have experienced the increase in captcha's.

>Anyone who has browsed through one of these personal VPN services - or even a DIY VPN from a datacentre IP - for more than about 10 minutes will have experienced the increase in captcha's.

So has anyone behind random CGNAT.