Largely because FB is mining your data today and has built a half-trillion dollar business doing it. For ISPs it's mostly theoretical and attempts here and there. (That's why this article uses the phrase "pose a greater surveillance risk").