They have, or at least Smart does. Some ISPs probably realized they need to play safe.
They can even hijack HTTPS connections and use their own cert so it'll appear as a verified site on browsers. They use it for CSAM monitoring. (That's why the SSL browser checkmark is useless.)