what if he always routed through an encrypted tunnel to a vpn?
The goal of encryption is to prevent an eavesdropper from reading messages, not to prevent them from tracking their source and destination.
Transmission Control Protocol (TCP) and as far as I know any other connection-oriented protocol connections carrying encrypted Application layer payload are for content-irrespective tracking purposes no different than ones carrying unencrypted Application layer payload.