If all your hotspot does, be it iPhone, Linux box or anything else, is forwarding VPN traffic between your devices and your cloud instance (your VPN exit node), why should you care about hotspot vulnerabilities?
Network security is unmaintaniable. Start caring about defensible boundaries instead.
Also, I really do question the premise; it is possible to be selective with what you let on your network. You shouldn't rely on it, of course, but again, better to minimize exposure.