It's not entirely impossible to attack SSL if you control the network and all that. It's hard and complicated. Your average hotel quite likely won't go there.

It is almost totally impossible to attack VPN or SSH. I use redsocks and the built-in OpenSSH SOCKS proxy to my own server every time I am not connected to a network I trust. Hack that.