How would they enforce it? The traffic looks identical to normal traffic so you cannot know from an ISP perspective. man-in-the-middle attack wouldn't work as VPN connects directly to the VPN server and has its own certificates and a country like Russia will not collaborate with US government for something that may harm their own interests. So the law cannot be enforced and is a dead law from the start