There is a secondary risk, and that is that ISPs (who IME often don't have skills or decent budgets for this sort of thing) are storing your data. At some point

There is a secondary risk, and that is that ISPs (who IME often don't have skills or decent budgets for this sort of thing) are storing your data. At some point an ISP is going to get hacked for this data. At least re-routing to a server somewhere bypasses that storage, even if it doesn't protect against overarching state snooping.