The fact
HTTPS encrypts content but exposes SNI: the WiFi operator can still identify which domains you visit despite encryption.
A VPN activated before connecting is the only effective countermeasure; free VPNs amplify risks on public networks.
Click the link to read an article on the topic: