Anyone with physical access can read unencrypted traffic if the ISP has not implemented any link layer encryption. All you need is to slightly bend a fiber and it will leak light.