Let's say my device is already compromised without my knowledge by my ISP, it has a malicious root certificate installed which allows my ISP to view all of my HTTPS traffic as plain text.
now if I use a secure paid VPN like OpenVPN or WireGuard, from a trusted VPN provider, that uses a non-malicious public trusted SSL certificate to encrypt data from my device and send it to the remote server, will that prevent my ISP from viewing my data as plain text? or can my ISP still decrypt packets going through the VPN tunnel?
per a comment's suggestion, I've read this question but since there are important details different in my question, it doesn't answer it.