ZegnatOf course once they are on your network they might try other things. E.g. your DNS requests probably aren’t encrypted, so they might feed you dummy DNS and send you to a fake bank site. HTTPS doesn’t matter then because they are in control of the fake bank site.
