True but it's much easier for a malicious player to set up a VPN service selling cheap a anonymity as a way to gather MITM targets than it is to set up an ISP or transit provider.