Even if you are not particularly aware of security or privacy, everyone who regularly uses public Wi-Fi networks should have a VPN.

The router may work with outdated and compromised firmware. The router may indeed be malicious and actively scan packets and log your data. The router may be incorrectly configured, and other users on the network may view your data and get into your laptop or mobile device.