It is a good question, ISPs are often required to keep logs of all user activity stored for a certain time period and hand over the data to law enforcement, so I can see that as a hurdle for them.