I'm new to cybersecurity btw so I don't know much.

But from the things that I learned so far I think that saying "public WIFIs are dangerous don't ever connect to them the hacker could read all your data" are not actually true, now nothing is 100% safe that's for sure but I feel that this overrated
Most website nowadays use HTTPS and not HTTP so the data is already encrypted and with strong methods and decrypting HTTPS is no small/easy task and even if someone tries to do an SSL strip and tries to downgrade HTTPS to HTTP it's not gonna be the least bit easy since websites use HSTS (HTTP Strict Transport Security) so security in most website is already tight, oh by websites I mean the one that contain sensitive info, now most of them do but like bank account and stuff already tighten their security more than regular ones

And even when it comes to certificates if there is anything suspicious with them browsers nowadays will warn you about it or may not even let you proceed (like accept the risk and continue)

Oh I'm strictly talking about reading data there maybe other methods to hack you like malware stuff (I just read a little about dunno much) and not saying it's 100 impossible but it's not like anyone can do it, and all stuff youtubers says about VPN like "Use it or you are in deep shit" is exaggerated and rather than 50/50 it's like 90/10 at best, maybe it was the case 10 or 20 years ago but not now

I appreciate any feedback or any correction in case what I said is wrong