@keb:
It is not our problem if someone uses the telecom network to read/write data to a vulnerable server - it is the vulnerable server's problem to fix.
Sounds great, but this is not how it works in the real world.
The ISP (and Tor network) are only responsible for delivering the packets and handling abuse of *network* resources such as DDoS - content is irrelevant.
Again, not how it works, at least not in all parts of the world. In the US in particular, there is the Digital Millennium Copyright Act (DMCA), under which the ISP does have obligations regarding content.