I wish all websites would use TLS. I've seen ISPs do a bunch of shady bullshit like redirecting misspelled domains to their own landing pages and placing an advertisement in third-party pages by sending fraudulent HTML. A secure connection for any transfer of information is the only defence a user has.