Your advice on ISPs is jurisdiction specific. As an example, in Germany and some other countries, you have private law firms involved, tracking down people with the help of the courts, shaking people down with threats of civil lawsuits. VPNs good, though.