They're good to pay for cellular network access privately. If someone is concerned about tracking from there then they should use the cellular network as little as they can or not at all. Remove SIM (or turn the eSIM off in settings but not delete) and use Airplane Mode.
No-KYC SIMs don't prevent cellular network related tracking, it just doesn't immediately tie your identity to it. You're still broadcasting a standard set of identifiers like IMSI and IMEI, and unique identifiers to eSIMs like EID number. You could fingerprint a device by certain features being available since feature sets could differentiate between phones and carriers even without them.
Adversaries with access to base stations and network metrics over a long period of time would see something not add up even if identifiers were being rotated... For example when on Data and using the same VPN all the time, connecting to the same groups of stations may suggest a travel schedule or where someone lives. You'd need to behave like a whole new person every single time you did a rotation, which is why we don't suggest utilities or hardware capable of changing some of them. Changing one would immediately ring alarm bells and map you. Proliferating No-KYC SIMs in bulk can also be costly, the best solution is free.
Most of this would be a non-issue if there's no linked identity or if you / your geographic area was not persistently monitored which is not likely. IMEI /EID are a phone identifier so you would need to buy a device privately (secondhand with cash?) to not have an identity link. Major phone stores may correlate identifiers of a phone to their customer.
Certain connections don't go through VPNs on almost all devices like captive portal checkers. Wi-Fi based calls and texts are also another. You can toggle connectivity and other default checks back to Google servers in GrapheneOS to blend in with other Android devices.
Stick to buying from a reputable and ethical seller. Don't buy shit with names like "Encrypted Russian Voice Change Ghost SIM" for 800 dollars. That garbage is a scam sold by sellers that get seized by law enforcement (think EncroChat, SkyECC) because they appeal directly to criminal groups who are gullible. Your money wouldn't just be wasted, it would fund something illicit. No support from us.