You did not make the statement "You can't read and understand English."?
What should come here from me? Someone writes, something is "not enough". I ask what is not enough and what is missing exactly to fix that problem but noone can explain.
So but it is the decision of the user what happens on the computer. There is no inherent law that requires to run an AV or PFW on the a computer connected to a public hotspot. There is no law of nature due to which a computer must have a PFW and AV else it is being infected with malware. It is not "a user would be some kind of fool" but "a fool's a fool". A foolish user may think he needs PFW and AV but that won't make the computer fool-proof. Either the user wants to have a secure computer and is willing to invest the time to learn how to achieve that or he installs a PFW and AV and might think he can remain a fool...
Gerald