Yeah, I highly doubt they will target users' endpoints (mostly because the ease and largely unreported nature of fiddling/requesting data from ISPs)

No matter where the data ends up being stored, if it has to GO somewhere, and you are the man in the middle everywhere, things start getting a lot easier to track.