MITM for HTTP and DNS are the main threats. An attacker can use one of these vectors to inject malicious JS into pages for you. Otherwise, it depends on what e

MITM for HTTP and DNS are the main threats. An attacker can use one of these vectors to inject malicious JS into pages for you. Otherwise, it depends on what else you use the network for. Maybe you set "SSL optional" in your mail client so your email password gets fired off in plaintext. Maybe your special radio streaming app is vulnerable to RCE. Maybe the latest Windows update accidently started sending your keylogs (ahem, "telemetry") over an unencrypted channel.