VAC does not ban IP of innocent people, it bans the Steam account's access to VAC enabled servers. It's not economical to create millions of accounts for a botn

VAC does not ban IP of innocent people, it bans the Steam account's access to VAC enabled servers. It's not economical to create millions of accounts for a botnet. Innocent people won't be affected unless their Steam account is stolen, which is a much bigger issue.