Before the introduction of the Enhanced Open security method, network ecosystems that had challenges supporting Passphrase Management architecture, such as Captive-Portal systems, had to choose between either staying open and completely unsecure or minimally enabling WPA2-PSK, which could destabilize the system.
With the introduction of Enhanced Open based on the Opportunistic Wireless Encryption (OWE) standard, those systems can choose to use Enhanced Open, which is more robust security than the WPA2-PSK, and with a preferred fit to the no-Passphrase-Management architecture. This mode utilizes the OWE protocol, as defined in the IETF document RFC 8110. OWE provides AES(CCMP128) encryption for data privacy, and PMF is required.