> To exploit a MiTM you need to be on the same network, this could be achieved through your local-cafe's WiFi or by compromising an internal system of a local network.
Or, say, your ISP injecting ads and tracking scripts into unencrypted pages your browser requests.