[Nextgrid]

What’s the point? An attacker would still be able to set up their malicious AP with the same encryption key and be able to tamper with traffic as if there wasn’t any encryption to begin with. In this case the encryption adds friction and degrades user experience while not improving security in any way.

[presumably]

Requiring the attacker to be active to view traffic, rather than passive (broadcasting it openly) is a very real security improvement.