And before anyone says this is hypothetical: many ISPs have already been caught injecting advertisements, malware and tracking into websites.