If you're security focused, why not GRE tunnel to a vultr or similar VM and exit there? Then your ISP gets no information.