Ever tried using a VPN like Shadowsocks in these environments? It's not perfect but it's less obvious than OpenVPN or WireGuard, especially if you set it up on a dedicated device. Just a heads up, even then, if the provider logs or gets compromised, you're still at risk.