If your running a TollGate to sell non-KYC internet access to your KYC Telco's Internet gateway, you should probably us a VPN to protect yourself from your customer's traffic. If your buying non-KYC internet from a TollGate and reselling it non-KYC, you don't need a VPN because your gateway has no clue who you are.

But if my customer doesn't use VPN, that doesn't protect me, tho, because I can see which sites they semd requests to. It only protects me from my KYC ISP knowing which sites I forward the requests to. Or am I misunderstanding it?