The splitting of hairs between “open” and “advertised” is ridiculous. It’s the users who had their passwords stolen, not the hotspot.
A better analogy is:
I leave my door open with a welcome sign out the front.
Two people enter.
One of them picks the pocket of the other.
And then the thief blames the guy who told him about the open door in the first place.
