This article is a good read in understanding how hotel security is weak against hackers. Even if you use a VPN (which everyone should use!) is just not enough! Who is responsible in protecting electronic locks or guest wifi? This article will answer your questions.

https://www.bloomberg.com/news/features/2019-06-26/the-hotel-hackers-are-hiding-in-the-remote-control-curtains