> This makes no sense. An ISP could block VPN traffic... and there are millions of people with access to only a single ISP.

How? They could block access to a specific IP, which might be a VPN server, but they have no way of differentiating encrypted vpn traffic from encrypted anything traffic.