they can, the majority of them are either too dumb, too inactive, or don't have the staff powers to do it though

VPN hostnames are incredibly easy to tell apart from residential ISPs, they almost always have "server" in them or have something easily identifiable that you can Google and immediately see that it's a server farm