It's already available on older Androids (my stock Android 6 Nexus 5 has it).

It asks to enable it on a per Wifi basis, if it detects any traffic is being mitm mangled, and you have to agree to enabling it for that Wifi.