SSL can prevent modification mid transit, of course you can still technically be MITMd if your ISP gets issued a cert which is valid for every domain but this would be detectable.

You can circumvent blocking with proxies/VPN, your ISP would have to block all proxy/VPN services to prevent this.