Someone's location also impacts their risk, but generally as long as one isn't in a very dense, high-value-of-information area, the realistic risk that cybercriminals are staked out somewhere like a Starbucks in Topeka, KS waiting to lure people into a MITM is probably less than the actual device getting stolen.