Valid point and wifi can definitely be sketchy but this was with the latest xfinity router and a non-default password. I am not a wifi hacking expert but I think you need proximity to the wifi in order to hack it. This was in the suburbs with zero foot or car traffic and there might have been two houses in wifi range. The chance that one of those houses had some hacker in it sniffing packets at 8:30 on a Sunday morning seems very very low.
There are many possible attack vectors. Could be some sort of DNS hijacking. Could be one of your apps if I had to guess:
My phone has a ton of apps but none of those types of apps. No "antivirus" apps. It's a pixel 3a and runs great on its own.
You can check them all closely to see if there's anything sketchy.