University networks vary
Eduroam and WPA2-Enterprise are stronger than open guest networks, but device-to-device exposure still exists on some VLANs.
Habits matter
Enable MFA, avoid banking on public captive portals, and keep OS updates current — often more impactful than any single app.