[tpxl]

ISPs regularly MITM http websites to inject ads (in the US even).

[forgotmypw17]

It happens. I think I'd rather my site be served with ads, than not at all.

It would be great if we could always automatically choose the right option, but browsers don't do that.

[tpxl]

Ads aren't that much of a problem, but serving cryptominers/phishing websites/viruses is a real issue.

[forgotmypw17]

Do ISPs really do that?

[tpxl]

I haven't heard of it, but other malicious actors surely do.