https://www.schneier.com/blog/archives/2026/08/hacking-public-wi-fi-dns-to-steal-credentials.html

“using public DNS servers such as Google’s 8.8.8.8 does not prevent this attack”

VPN. Ugh