Thanks for sharing this. My gut reaction is that that these attacks were unreasonable and careless in who they impacted and should be criminal. But it’s very interesting to read an analysis of the actual law - even if I don’t agree with it

That seems unusually mature and consumer-oriented for an ISP

These days with how tied to your identity email is, using an ISP provided email is like self-imposed vendor lock-in though. A friend who uses an ISP provided email just switched ISPs and it caused havoc - bank logins, power company logins, etc