Public WiFi: Quick demo for 2 devices on the same network
1. SSLstrip DNS change leads to user input interception for HTTPS with HSTS bypass
2. DNS spoofing redirects user to attacker controlled website
More in upcoming "NetHunter Hacker XIII: Overall guide to MITM framework"
Public WIFI is safe enough to use, without a VPN, for almost all users. And yes, even for online banking.