Ya it only protects you from your KYC ISP. The end user of the internet connection should also use a VPN to protect himself from the network. The non KYC hops in-between don't really need to care much because they are buying non KYC and the traffic that they forward isn't theirs..