@silent_john - And the answer is neither. Out of the frying pan and into the fire. It becomes a false dichotomy.
Another way I've asked myself that similar questions is "do I trust a general business model of the ISP whose main money maker is providing general internet access and ALSO spies on me or do I trust a small niche corporation that purports to have a business model that is there to protect vulnerable individuals but allows for business and operational goals to attack that vulnerable individual."?
Simply put, I don't trust the ISP. I really don't trust the VPN. So I find other solutions outside of the ISP to address specific security and privacy needs.