I'm honestly surprised that WiFi Hotspot doesn't isolate hosts, after companies like Meta have been caught running servers inside their apps and connecting to those to track users.