I mean, if the stated intent of an export control is to allow domestic use but prevent export, achieving the stated intent is impossible, because every developer in the world wants the latest models and will get a VPN.
A VPN won't work in this instance without a US credit card. So it's completely possible.
Harder to hide payment info than ip origin
A VPN won't work in this instance without a US credit card. So it's completely possible.