That's functional isolation. Yeah, they're individually tested to 1500 Vrms (or so the factory in china claims), but that insulation is still just the very thin lacquer of the windings and maybe lacquer on the core. There are more expensive (and physically much larger) Ethernet transformers for medical devices and such, these have actual double/reinforced insulation and are tested to much higher voltages.

Typically the Ethernet shield is also only alibi-insulated from the device's ground. Sometimes not at all. (Personally it's always funny to me to see the fat 1kV/1nF capacitor from the shield to the device ground and then the metal of the socket is just bunched up with basically no clearance against the metal case or something like that). This can of course be avoided by simply using unshielded cable.