Please read my comment again. Unless someone is sharing their GPS, all they have to go on is the ip address. This is why a lot of people vpn into other countries to watch things on Netflix that aren't available where they are.
This also brings up another point. For reasons unknown, sometimes my cell phone ip address comes back as a Florida ip. If I happened to access it via an ip that geolocates to Florida they would have force me to verify my ID to keep using it. That opens them up to potentially having way more verifications to process and a much larger attack surface for identity theft not to mention the millions of people and their representatives that will be extremely pissed off.
I get what you are saying. My point about the sportsbook apps is that they won't even let you login without allowing location services and verifying you are in a state that allows betting. I was just trying to highlight there are already systems in place to make VPNs a non-starter.
I agree with you on the identity verification. I really don't trust the sites this bill is aimed at to do any of this right or not have poor security. It's a big cluster waiting to happen.