My workaround, whenever I can't tether to my mobile phone and must use an untrusted hotspot, is to route all traffic over OpenVPN to the server running in my home.