So customers need to demand security as part of their service, while ISPs need to shun ISPs that don’t comply. To help things along, someone should file a lawsuit – not too many! – against ISPs who tolerate misbehavior.