Another choice is to use a VPN service - for instance Avast has what they call Secureline. It is encrypted from the time it leaves your computer (not your network) until it is passed on.
Another note - SSL (https) sites are encrypted from the time you enter the data in your computer in your browser until decrypted on the site. There is no exposure through the "open" wifi of unencrypted data. Unless you don't have a firewall on your computer, it would be relatively difficult to hack (by relatively difficult, I mean that it's not worth the extra work for most "fly by" hackers). There is very little you can do to prevent a really determined hacker.
Another point is that most really damaging hacking is actually done by "social engineering", which includes things like phishing emails and these "Microsoft service" phone calls. It's much easier for someone to get in to your computer if you actually help them.
So, for "safe" computing make sure the little lock is closed, the site begins with https, and possibly use a VPN service. This will minimize the risk, but it will never be zero. It never was, even with in person banking (remember the old carbon paper under the deposit slip trick).
The problem with computers is once the hack is done it takes very little time to get the data and leave. A saying I remember - the difference between making a mistake on paper and with a computer is that it takes a lot longer to make millions of mistakes with paper records :)
Of course, never leave the default passwords on any of your equipment (routers, hotspots, etc.). That's leaving a no cost buffet for anyone that wants to get in to your stuff.