At least with WPA each client uses a different session key to talk to the AP. Clients can't decrypt traffic to and from other clients. Of course, there may be attacks against _that_, but they are likely to be a bit harder than sidejacking.
s/v Dancing Days
Lewisville Lake, TX