The UK’s policy debate isn’t just a consumer story, it’s an enterprise security problem

**Executive summary:** The article warns that the UK consultation on age-gating VPNs creates operational ambiguity for enterprise security teams while attackers increasingly exploit remote access (VPNs, proxies, TOR) and identity-based vulnerabilities; it cites Expel data showing identity-based attacks comprised 68.6% of incidents in 2025 and recommends immediate controls (managed-device conditional access, treating blocked VPN/proxy logins as incidents, auditing VPN/third-party access and segmentation).