But APs are not limited to internet traffic. Maybe some company somewhere runs an internal server, and because it's internal they might think that encryption i

But APs are not limited to internet traffic. Maybe some company somewhere runs an internal server, and because it's internal they might think that encryption is not needed. Hell, it might even use GET arguments for username/passwords in the URL. The crash dumps would contain these data as well.