So guests coming to your home would need to first download certificates in order to be able to trust your network. But they would then need to trust that certif

So guests coming to your home would need to first download certificates in order to be able to trust your network. But they would then need to trust that certificate not to be used to MITM their own EAP servers... This doesn’t sound very user friendly. Am I missing something?