Comment by meindnoch

Residential ISPs will only transmit packets that have a valid device attestation signature from one of the well-known device vendors. "Unsafe" software won't get access to the devices' secure enclave to sign their packets, so their packets will either have to be transmitted in plaintext, or they'll be dropped by the ISP.