VPN isn’t enough, there are other ways of the apps/websute knowing your true location, of course the VPN providers don’t advertise this.VPN and fake address is all you need if you really want to do it. They won't be able to trace that as a corporation.
Though iPlayer is using a VPN blocking service. Which just looks up a list of known VPN server IPs.
Also iPlayer etc don’t have a list of known VPN server IPs, they do a reverse DNS lookup of the IP and then block by domain name.