So if https is all that's needed, why do VPNs recommend using them at public locations? Just false advertising? I click on my bank app and it always wants a password and I guess I don't know enough about network engineering. I'm interested in Android Development but don't know much about WiFi I guess.