Originally Posted by plunet

I obvs can't say why IB don't do the same for all their sites.

But responding on the public WiFi point, you're right that they are misused but generally the people who use those networks are broadly transitory, so the misuse tends to come and go and is more sporadic than commercial public VPNs where the users are typically more sticky and persistent.

So when they turn up in source IP reputation lists commercial public VPNs are usually near the top of the risk list, whereas public WiFi is typically a few notches below in the risk stakes, and to be fair public WiFi often isn't that far removed from consumer ISPs who have significant CGNAT on their IPv4