Well, your ISP likely _doesn't_ know which sites you are going to.
In the old days, they'd run proxies, but with SSL, they no longer know where they are going, only that they are, for example, going to an AWS or GCP site.
In the old days, they'd run proxies, but with SSL, they no longer know where they are going, only that they are, for example, going to an AWS or GCP site.