A personal debit card (which requires ID verification anyway, and likely has their parents able to see activity)? A personal credit card (which definitely requires ID + 18+)? Stealing their parents' card (works for like 5 days)? Does the VPS company block VPN ports without verification, similar to how most companies handle email? Do you think VPS services have any interest, at all, in an underage clientele?
The proposed law is plenty effective - saying otherwise is like saying kids can bypass age verification at the knife shop or alcohol store by using eBay. No sane mind says that age verification is therefore useless.