That's the core of the legal issue. ISPs are protected, it's not clearly regulated what/who an ISP actually is, and the courts generally haven't granted the status to private/on-the-side providers.

If a restaurant lets their customers use their phone are they liable if the customer uses the phone for illegal purposes?