NetworkManager on a Linux laptop: the dispatcher.d hooks for “auto-enable VPN at coffee shops”
You sit down at a coffee shop, click the Wi-Fi prompt, and accept the captive portal. Your laptop is now on a network where the person at the next table can run tcpdump on the SSID and see your unencrypted …