This is why it's good to use a travel router with its own NAT and VPN tunnel back to the home network. GL.iNet offers some inexpensive ones including the upcoming Mango 2. Unifi also has one which is dated, but works well in their ecosystem. If none work, stay on cellular which is the safest bet anyways as even a travel router doesn't entirely mitigate the risk.
Something simple and free everyone should do at a minimum is utilize a DNS provider like Quad 9 (9.9.9.9), ControlD (76.76.2.1), or Cloudflare (1.1.1.2). Even better, install profiles using encrypted DNS to these providers. This isn't bulletproof, but does help avoid a lot of the malicious sites out there. These three in particular rated well in the most recent Nexxwave testing. Here are some already setup profiles for download on iPhones, iPads, and Macs:
DNS over HTTPS config profiles for iOS & macOS. Contribute to paulmillr/encrypted-dns development by creating an account on GitHub.
github.com
