Encrypted on Touch
VPN runs automatically the second any device connects to a network you don’t own. Set this once on every laptop and phone before the trip. Confirm in airplane mode that it auto-connects.
The risk is not "hacker in the lobby." The risk is misconfigured corporate routers, captive portals injecting trackers, and ISPs in jurisdictions you have not researched. Encryption sidesteps all three.
