Source? I do not think most of the ISPs in my area are particularly scummy. They provide reliable plain internet service with no data caps (and also TV/phone service if you so desire) for a reasonable monthly fee, and in my experience, most of them hire enough customer service workers on their support phone. All of them also resisted internet filtering until the legal system forced them to do so. What more is there to ask of an ISP?
In my area none of them provide reliable internet service, most of them enforce some censorship and have poor customer service, and all of them perform the legally-mandated surveillance.
Taking care of insecure IoT devices would be a start: https://news.ycombinator.com/item?id=15946095
Depends on where you live, I haven't exactly counted them but I have at least 20 options. Worst-case you can start your own ISP.
Where I live the nationwide fiber network has around 100 ISPs available of varying reputation.
Wikipedia says that PPPoE "offers encryption" but now I'm curious if this is effective, and actually used by anyone...