The ISP owns the transit of traffic between the client and the server. If they want to block people from accessing certain places they can just block it at the ip layer with packet filtering. Why would they go through all this rigmarole with mangling SNI data?