Yes, first don’t use a shared WiFi network, but if you have to use a VPN. I have a tablet I use for testing and I frequently MiTM shared wifi to show people. I can also in real time decrypt and encrypt SSL so even secure web sites are easily spoofed.
That guy next to you at Starbucks with a tablet may just be me