Not the ISPs problem at all.

Blame IoT manufacturers for providing shit devices that can easily be hacked.

Theere is no difference from a technical standpoint between a business and residential IP. It’s allocation is tied to the network provider.

People install extensions onto browsers for any number of reasons without knowing what it does. It was a problem is the 90s that never went away.