> Most ISP's have a central point of contact / administration, and can be compelled to only forward encrypted traffic if it's explicitly permitted.

We standardized https. So it should be a lot harder than usual techniques.