That is a matter of reliability, not security. I can also flood the air with white noise. That doesnt mean radio isnt secure.

Denial of service is a security vulnerability.

I know it's part of the "CIA" stuff, but I don't see it as a vulnerability in this specific case. Jamming affects all devices, not just "secure" ones.

Also, there is no countermeasure against it, which makes it even less a security vulnerability.

You could easily be a MITM using the de-authentication message.

Not everyone has access or the funds to get a jammer. Making it more "Vulnerable"

Take a gander at EVIL TWINS: https://rootsh3ll.com/evil-twin-attack/

That is not reliable. Windows for example won't connect to an open AP that previously had encryption enabled. At least not automatically. The next problem you might face is that TLS enabled websites will trigger an error warning.

Your TLS argument is true. That however does not make it any less insecure.

You see, People around the world click 'proceed anyway' on so many of those websites. That is what happens when APs in coffee shops are misconfigured around the world.

It is barely a useful prompt (if at all).

And keep in mind this is a MITM we are talking about. He could simply, replace an instance of a website with his local version using 'http' instead of 'https'. The prompt would not even show up in this case.

It's still a dialog in the OS, not on a website.

You can blame it to users stupidity all you want, but if people click on "continue" it's their fault. They can read. If they can't, they shouldn't use a PC in the first place.