Anyone on a public WiFi without a VPN has more problems than just this hack.
Perhaps so, but you surely are aware that the vast majority of Wifi users are precisely in that category (no VPN), right? One can't simply dismiss the scope of that huge attack surface just by calling them names (implicitly, "has more problems").