While we try our best to lock down our laptop, close open ports, run littlesnitch, ufw but it is always an unease to connect them directly to an public wifi, worrying about some 0day that allow someone in local lan to hack it.

What I sometimes do is to use my phone connecting to the free wifi and simultaneously hotspotting it to my laptop - It feels better to have something in between blocking random nmap scans.

Anyone else doing this? Is there other tricks you do?