End users AND ISP's are to blame (Score 2, Interesting)

I worked for an ISP that had outbound port 25 blocked. Served both purposes in regards to our users spamming and infected users spamming. If a business client (or residential even), asked to have it open, we'd set their policy to allow outbound port 25 (assuming they had a static ip) with a small extra charge. Therefore this was never a big issue for us. Is it really this hard for ISP's to do this? I know at least in Ontario, Sympatico does this. Reality is, you can't always expect the user to be 100% patched and secured. At least not all of them.