When a VPN becomes a risk signal

Why VPN use alone should never decide whether a visitor is blocked, and how network and browser signals can be evaluated in context.