The people concerned with that hypothetical can use a VPN.

At most they could see domains, ip addresses, timestamps, and http-only sites (are there any left?)

But the person sitting next to you can see everything.