Or at least create an additional layer so that that just having access to the ISP alone can't tell what a user did, need to have access to the actual VPN company.