Yes, the Evil Twin is a tough one. I wouldn't fall for the password phish, but if the Evil Twin gets in...
That's why I use hard wired access at home. I even have guests who bring their computers use a hard wire, rather than wireless. Phones & tablets are the only exceptions, which do leave the opening.