> If my (one) local "high-speed" ISP demands that I install a new root cert so they can MITM all my traffic
I don't see what sense it makes to worry about that before it actually happens. Especially when there's no reason to believe it is going to happen.