A VPN just moves the attack vector from the ISP to the VPN provider, it doesn't protect you from this in any way at all. Better to use an ISP you trust, though that's difficult to find.

I don't trust any public VPN provider because they all start off by lying about what their product does.