Afaik most governments don't build browsers. How would this defeat VPNs? As far as I understood this API allows websites to make sure they run on unmodified browsers. The underlying network stack is not checked.