I'm at Unitymedia and have access to the free hotspots.
If you now, for example, On your own laptop set up a Wi-Fi hotspot and calls it that, could it be accessed by the access data of strangers who want to dial in incorrectly?
That's the well-known "Man in the middle" attack, and one of the reasons why the twofold factor authentication was introduced.
That works if you combine that with a phishing attack. That means you fake the login page of Unitymedia, which usually appears when you log in to the WLAN.
A page does not appear, you just enter the credentials and it's inside.
On the side of Unitymedia is that before the first connection to a hotspot to install the CA certificate from Unitymedia and that you should enable in the wireless settings MSCHAPV2. This has the purpose of preventing such attacks.
https://www.unitymedia.de/privatkunden/hilfe_service/hilfe_themen/anleitungen/?pagina=topic/internet/wifispot-auf-meinem-gerat-einrichten/device