Set up full disk encryption or an encrypted container like gocryptfs. But typically they analyze network traffic not IO traffic because that’s quite a pain to implement as they’d have to reimplement the entire filesystem just to analyze what you store.