In your case prevention of DDOS via VPN guides your decisions and legit VPN users are collateral damage.
I understand your position, and as you say, no data is sold, so no real harm.
Perhaps banks are the same way.
But out of the ones I have to deal with, only one makes me drop the VPN for access. /smh
‘s a long read. Here’s the intro blurb:
Gonna dive in and see what nuggets of wisdom they offer.