A regional MD lands for a board meeting and joins the hotel Wi-Fi to download the morning's deck. Captive portal, accept terms, done. From the moment the handshake completes, every TLS-stripped fallback, every DNS query, every SIP registration is observable on the local network. The UK FCDO's published advice for travellers to China is to assume exactly this.
EN/ABEL 2.0
On EN/ABEL 2.0 the SIM refuses to fail open. The device prefers the hardware-rooted cellular identity over an unverified Wi-Fi join, routes through a sovereign EU/UK egress by default, and writes a tamper-evident audit row for every routing decision so the trip can be reviewed against your DPIA on return.
Sources: [1]

