&gt; Aren&#x27;t you then just effectively shifting your choice of trusted provider from ISP to VPN?<p>Sure, but the issue at hand is js&#x2F;html injection, which a VPN more or less (generally more) obviates.