I think only 2-3 endpoints should be protected. The others are there for information and they do provide some leakage but you already have most of that data any

I think only 2-3 endpoints should be protected. The others are there for information and they do provide some leakage but you already have most of that data anyway when you auth over the WiFi.