You're right, the definition of transaction is quite broad here. However in order for VPN to run afoul of this bill, the gov't would first need to enforce the bill by banning individual users from accessing specific sites on the internet, which the VPN would then bypass. That kind of censorship has never been permitted under the first amendment and I don't see anything here that changes that.