On Android there's also "Private DNS" where you can set a different server to resolve domain names. This way, you won't need to install and run additional apps and can still use VPN for ... well VPN.
They already have the money, they just need a business as a facade to claim the money was earned by running the business. But you are right, eventually it would be suspicious if they only sold food but never bought the matching raw ingredients. That's probably why they now moved to barber shops - nobody knows or can prove you didn't cut the hair of the hundreds of people that were never there.
