Public APs don't require ID for login. Only the IM services require ID.
Tangentially, regarding your other comment that surveillance systems are often set up in an ad hoc way, could you provide some references? This is quite interesting to hear.
What isn't shown is that they also inject ads into web traffic and (allegedly) can be controlled like a botnet.