Another thing to consider is that many WAPs can be configured with MAC address filtering. Set it to only allow your machines on, and you are pretty well good to go. Still use WEP to encrypt your data (as weak as it is, its better than nothing), but between the two, you can do *much* better than the standard, out of the box config.
At least as far as I know. Mephisto will probably tear this apart as soon as he sees it