We're talking ISPs here, not state actors. If an individual catches the full attention of the NSA, there's not all that much they can do to defend their privacy.