I will add the caveat that if you really are connecting to sketchy networks you may want to be sure you are using encrypted DNS to ensure the network is not tampering with DNS. If you are a frequent traveler or user of public wifi some may argue for a VPN, others would say use HTTPS and a trusted DNS. You have to make that call for yourself.