Use a VPN that per CJ's comments above logs no user activity. So your traffic would be encapsulated and encrypted over a connection from the VPN, to and from whatever destination, without the ability to tie back to the actual source (you). While the connection is live, yes the VPN needs to connect you to them. But if that is sufficiently authenticated and encrypted, the connection would be private and could not be sniffed. And if the subsequent traffic over that connection was likewise secure, and if none of this activity was logged, it would hypothetically be safe from sniffing either the connection or the subsequent activity over the connection.