Any wifi network you connect to is susceptible to a man-in-the-middle attack which allows an attacker to get between your device and the internet, thereby allowing anything you send over the network to be intercepted. A VPN can help mitigate the risk of this by encrypting traffic.