They don't have to cut direct with the operator. They can go up a little higher in the chain to a global "wifi offload" operator like Wefi.

https://www.wefi.com/wifi-offload

Then they can just get Passpoint access through a shitton of various endpoints.