Half a brain, and...
the ability to keep up in the arms-race that will arise between people hoping to avoid their ISP's DNS treachery and well-heeled and technically savvy ISPs devising ever more devious ways to keep MITMing them. On Comcast's budget, the can afford to suborn pretty much every CA on the planet, as just one example. Sure, sign up for a VPN, but also take a couple courses in network security so you can understand the articles about how to defeat the latest attack. You can read them via what you might think is myrandomvpnservice.com, and is actually served by Comcast, like their speedtest proxies.
Biting the hand that feeds IT
