[Keyframe]

Considering they do intercept, as widely documented, question is how do they see if traffic is encrypted?

[jagger27]

Pretty trivial. If it looks like random noise, and doesn't have a compression header then it's probably encrypted.