There are products that deliver strong crypto for windows mobile devices as well (Goodlink, etc), but they are again aimed at corporate customers where the customer runs the "server" end of the connection.

Keep in mind that PPTP is flawed, but its better than cleartext, and in the scenario you're worrying about you don't necessarily need to have great crypto, just good enough to get the WiFi sniffer user to focus on someone else instead of you. Just like walking in the forest with a friend, when you come across a bear you don't need to outrun the bear, just your friend :-)

Bob

PS: yes, I do know that many, many sites implement HTTPS in a variety of flawed ways. Nonetheless, HTTPS does offer a good level of protection if implemented properly.