> using the provided WiFi AP

Which you can simply not do if you don't trust your ISP not to misuse it. Which is why I never run my ISP's router, I run my own instead.