They already aren't neutral. For example, if you mirror or seed a Kali ISO, you're in violation of Comcast's TOS (even if you have business-class service), which says you may not "distribute tools or devices designed or used for compromising security or whose use is otherwise unauthorized, such as password guessing programs, decoders, password gatherers, keystroke loggers, analyzers, cracking tools, packet sniffers, encryption circumvention devices, or Trojan Horse programs."
They already aren't neutral. For example, if you mirror or seed a Kali ISO, you're in violation of Comcast's TOS (even if you have business-class service), which says you may not "distribute tools or devices designed or used for compromising security or whose use is otherwise unauthorized, such as password guessing programs, decoders, password gatherers, keystroke loggers, analyzers, cracking tools, packet sniffers, encryption circumvention devices, or Trojan Horse programs."