A regional MD lands for a board meeting and joins the hotel Wi-Fi to download the morning's deck. Captive portal, accept terms, done. From the moment the handshake completes, every TLS-stripped fallback, every DNS query, every SIP registration is observable on the local network. The UK FCDO's published advice for travellers to China is to assume exactly this.
Boundless 2.0
On Boundless 2.0 the SIM refuses to fail open. The device prefers the hardware-rooted cellular identity over an unverified Wi-Fi join, routes through a sovereign EU/UK egress by default, and writes a tamper-evident audit row for every routing decision so the trip can be reviewed against your DPIA on return.
Sources: [1]

