I use a persistent (Wireguard) VPN back to my home network at all times. Primary benefit is avoiding any MitM, with secondary benefits including access to local services, and DNS ad-blocking.