In addition to what onychomys stated, there's also the matter of locality. If you were to assume they would be equally likely to exploit you, your ISP is more c

In addition to what onychomys stated, there's also the matter of locality. If you were to assume they would be equally likely to exploit you, your ISP is more capable of doing so because it's local. For example, the VPN provider can sell your data to spammers that get filtered, but you ISP can shove spam in your physical mailbox.