Hotspots are as secure as any WiFi network. That is to say, it depends on the encryption standard you use (WPA2/WPA3) and the password/shared key. If you use a strong 40-character password with WPA3, no one’s cracking that. With a password like that, even WPA2 is sufficient.
Something like this? https://github.com/mrusme/neonmodem
It uses my Lemmy API client library :3