That's quite harsh. Good thing you're not in charge of making decisions.

Thanks to CGNAT you, obviously an upstanding digital citizen, will also have to pay for your neighbor purchasing an IoT toaster.

> When your IP is found to have been part of a botnet, I think ISPs should just limit you to like 20Mbps for at least a year, so you think twice about buying that 10$ wifi baby monitor next time.

You're talking as if people can't just get another account or change ISPs.

Also, it seems you're mainly interested in gratuitously punish people who are powerless about issues instead of thinking about very basic approaches such as rate-limiting policies.

Okay and when your brand new Samsung TV is used in a botnet you should have your internet limited to 20Mbps as well? It's not just $10 pieces of crap of Amazon that fall victim to Botnet's.

If that could make people think about it, I'd be all for it. But the people buying that junk are absolutely clueless, and would remain so even after the punishment was well-underway.

Or you go after the producers and retailers of these devices. This way you wont have to harm tech-illiterate people.