I think that's a silly argument, but even if we accept it at face value 1) VPN usage is difficult to detect and 2) bad actors are still going to use VPNs. This line of thinking removes privacy from good actors while doing nothing to address security concerns from bad actors.