What's to stop someone from spoofing your bank site while you're on the free wifi at Starbucks? I can imagine an aftermarket module designed to do just that, so free wifi is clearly not viable.

In practice, they'll implement encryption and authentication, then make it a federal crime to mess with it.