So if https is all that's needed, why do VPNs recommend using them at public locations? Just false advertising? I click on my bank app and it always wants a password and I guess I don't know enough about network engineering. I'm interested in Android Development but don't know much about WiFi I guess.
Marketing mostly. The vpn makes an encrypted tunnel that you're traffic goes thru. If using https and vpn there are 2 layers of encryption. It's not false advertising bc an extra layer doesn't hurt. Now if your sending password over http it would help but you shouldnt be using a site that sends passwords over plaintext. I would say vpn is mostly to either hide your ip from websites or to hide internet activity from your isp