I've been trying to burn this into people's brains for years. Don't use public Wi-Fi without a VPN. Ever. If you have anything that transmit credentials unencrypted... you know the end.