One might worry more what Mega and Gigacorps are doing, secret partner friendly endeavours with Govts against you, than what some tiny ISP or whoever is doing with a few boxes.
And was posted here many times about creating additional trust models and layers for relays, audits metrics and choices for users beyond the CIDR/nn and Family game that might go towards satisfying some reasonable concerns in that space... but crickets.
And when you can't trust your CPUs, ISPs, operators, Govts, or even your own anonymous overlay networks strength against them... it's probably time for strategic rethink.