Sure, but when the biggest (or only) ISPs in many countries are doing it, and you can prevent it by taking out 15 minutes to set up Let's Encrypt, that's on you.
Nope. They can get a VPN, or fight against their big ISP or government to stop such dubious practices. Your point of view seems to come from a standpoint of infantilization of these users.