If it was practical to do so (maybe involving a clever splitting of customer dashboard pages onto different domains in different Cloudflare zones?), we would on

If it was practical to do so (maybe involving a clever splitting of customer dashboard pages onto different domains in different Cloudflare zones?), we would only shut off free-tier access for these people, while still allowing sign-ups that skip the promotion and take (and place a hold on) a card straight from the start. Sort of like how some people can't qualify for a post-paid cellphone plan, but anyone can get a prepaid cellphone plan. As it is, though, we can't block VPNs even if we wanted to; VPN companies are currently winning the arms race against VPN detection. (You can tell who's currently on the winning side this week by whether you see YouTube ads that make the claim that you can use a VPN to enable geo-shifting for Netflix. Netflix is legally obligated by its IP licence-agreements to do what it can to shut that down; and whenever they manage it, the VPN services stop making that claim for a while, until they figure out how to make it happen again. Currently, they're making it.)