Encryption according to IETF standards
VLESS + REALITY and XHTTP encrypt traffic with TLS 1.3 (RFC 9846), the same standard that protects HTTPS websites. Hysteria2 runs over QUIC (RFC 9000) with the same TLS 1.3, and Shadowsocks uses the ChaCha20-Poly1305 (RFC 8439) and AES-GCM ciphers.
Your provider and traffic analysis systems see only an encrypted stream: they can’t tell which sites you actually open or what you send.