With sftp/ftps, it’s true that they don’t know what you’re copying, but the metadata contains the ip address and the file size, so if someone’s specifically interested in trying to get you, then it’s easy for them to guess what you’re doing. That’s why we’re all torrenting Linux ISOs and AI models.
But that’s just my take on it, most don’t use a vpn when using seedboxes.