If you are at a Starbucks or other reputable store with Wifi, can they insert security certificates into your Windows cert store (or whatever the macOS equivalent is) and decrypt your SLL traffic? I know companies can do this if you are on the domain.