The nefarious can do many things if they infiltrate a WiFi router in a coffee shop. I had a phone that was attacked via Bluetooth in the Seattle airport after I accidentally left it enabled. Had tons of junk mail and other files in the phone and had to do a factory reset to get it working again. Some guy must have been sitting there or walking around with the attack phone.