Once I had to reconfigure some Airtame devices out in the field. They couldn't connect to the cloud, but I made a hotspot with the same SSID and credential settings as one of our guest networks at work. The devices were able to connect to it, and I successfully reconfigured them. Some time later at work my phone was feeling warm. I was surprized to see I was subsidizing random office internet traffic with my cellular data plan.

Access protection is usually done more diligently for important networks, but the simplicity of a MITM attack makes it apparent that all corporate networks need RADIUS or similar protection.