> It's for protection from ISPs.

Insofar as there are shitty ISPs that sell your data, yes. Most ISPs don't though. Also: I trust a VPN based in Gibraltar more than an ISP which is known to sell your data.

> Most ISPs don't though.

You sure? ISPs can, and do, this fairly readily. They wiggle on what “your data is” (“CPNI”) but browsing history via DNS queries is not uncommon (and cheap, to boot).

Go read Spectrum’s policy and how they wiggle around it as just one example: https://www.spectrum.com/policies/your-privacy-rights-opt-ou...

In North America at least, your ISP will happily comply with copyright notices and threats of lawsuits and pass them along.

Gibraltar is a British territory under the jurisdiction and sovereignty of the United Kingdom, not much different from the US.