What are the two primary wireless security risks of using public open Wi-Fi without a VPN, at the network level?

• A.(1) Passive eavesdropping: all unencrypted HTTP traffic (and any TLS traffic the attacker can decrypt via MITM) is visible to anyone on the same network using Wireshark. (2) Evil twin/MITM: an attacker can operate a rogue AP with the same SSID; since open networks have no authentication, the attacker can position their AP with higher signal strength to intercept traffic before forwarding it to the internet
• B.Using public Wi-Fi drains the laptop battery faster; VPN reduces CPU load and extends battery life
• C.Public Wi-Fi only poses risks to unencrypted HTTP; all HTTPS traffic is already fully protected without a VPN
• D.The primary risk is IP address exhaustion; the coffee shop DHCP pool may not have addresses for all clients