Sakis provides networking and security services for a small chain of coffee shops. The coffee shop chain wants to provide secure, free wireless for customers. Which of the following is the best option available to Sakis to allow customers to connect securely to his wireless network without needing a user account if Sakis does not need to worry about protocol support issues?

WPA3's simultaneous authentication of equals (SAE) mode improves on WPA2's pre-shared key (PSK) mode by allowing for secure authentication between clients and the wireless network without enterprise user accounts. If Sakis needed to worry about support for WPA3, which may not be available to all systems that may want to connect, he might have to choose WPA2. A captive portal is often used with open guest networks but requires additional work to maintain, and Enterprise mode requires user accounts.