there were a case of some isp employee in my place were doing some backdooring on ppl router to get their crypto wallet seed or something 2 years earlier
so anyone torrenting something that originated within the same ISP's network would be using tons of bandwidth that they were only getting one revenue stream from
they can use the same justification south korea does except they actually are still building the infrastructure for this stuff and not just lying through their teeth about it