It sounds like this attack would work in that scenario provided the attacker is able to connect to the guest access point.

I haven’t paid attention to one in a while but I seem to remember the need to authenticate with the guest network using Xfinity credentials. This at least makes it so attribution might be possible.

As of a few years ago, you could simply spoof your MAC to that of a Comcast subscriber with these and you'd get unrestricted access on the hotspot.

This is probably the biggest issue.

I turn WiFi mine off and use my own WiFi ap.

See also: Amazon's Sidewalk (which shares your network via Ring camerae, e.g.).

[dead]