> There are providers who claim they are ethically sourced, and that users have consented. Although I guess many are users who don't know or care that it is happening.

Betcha that means there was "consent" language on page 55 of some click-through EULA.

The landscape spans the gamut of everything from malware to explicit consent: https://packetstream.io/share-bandwidth/