The problem we had in the US is that a lot of ISPs put up a modem, but not a router. They were trying to charge a fee for every machine, not the connection. It hasn't worked terribly well and I'm surprised if anyone doesn't require a router these days.

Not stopping virus traffic is a problem. I think it becomes hard to tell sometimes what's legitimate and what's not, but they should be able to figure it out more often than not. At least they could be working with SANS or someone else to identify virus/bot/other traffic and shut it down.