This is the way. Also good for those hotels/conference centers that give you a small number of “allowable” devices — when you have kids with multiple devices, maybe a game console, etc plus maybe an appletv you quickly run out. Instead the router authenticates and that’s that.

I terminate my VPN at one of my own machines mainly for (marginal) security but conveniently this lets me stream the same stuff as home since the services can’t tell the exit is a VPN