One of the comments mentions that if you're careful about only putting data only over HTTPS, your data is still safe since it's encrypted that way. Good reason to install and use HTTPS Everywhere (it's a plugin).
Think I'm going to just use the mobile network for my phone when I'm away from home now especially with that info about VPNs although at least one was found to be good.
Free wireless access points are probably all going to be scary now because the likelihood they will patch is small. And home routers, ugh, even less likely to be patched unless they're new or expensive. Sigh. Really considering using a Raspberry PI as a router. It's better than cheap routers, I'm sure, and at least you know it's going to continue to be patched.