Earlier today I noticed a brief “loading…” splash while using a cafe’s wifi and immediately thought they (or someone else on the network) were doing man-in-the-middle shenanigans like hotels used to do. Saw the splash again when I got home, so I assume it’s a legit update to the site instead.
It sure would be nice if that concern were mitigated by tls though…