Or they are just home users behind a CGNAT, which more and more ISPs use.

And even if they aren’t, home users usually have dynamic IPs, meaning it can change.