IMHO, VPNs scare me more than ISPs spying on me. I ran a small ISP (<100 subscribers) and the sheer amount of data you could collect on a single person was mind boggling. This was pre-https-all-the-things, so I’m sure it’s better these days. Still, do I really want my traffic to go through some unregulated entity? Not really…