Not the ISPs problem at all.
Blame IoT manufacturers for providing shit devices that can easily be hacked.
Theere is no difference from a technical standpoint between a business and residential IP. It's allocation is tied to the network provider.
People install extensions onto browsers for any number of reasons without knowing what it does. It was a problem is the 90s that never went away.
If you used a llm to generate code, how are you licensing this under AGPL? LLM output is not copy-protected.