The difference is how long it takes and how much resources. There is no perfect security. Security is not a "yes/no" thing.
Alice -- ISP1 -- 1000 hops -- ISP2 -- Bob
Which metadata? ISPs only know your next hop. Check out how garlic routing works.