It’s not federated but there is pixelcanvas.io, which is like r/place but infinite and not controlled by Reddit

Probably by just looking at the IP address, either due to the IP addresses of the VPNs being public or by the fact that many users are accessing the service through a single IP address