hiding your real ISP IP isn't that big a deal for pen testers, either VPN or Tor

I don't know many (I certainly don't) who use their real IP when probing sites