ssh sessions reveal enough that an interactive session, a file transfer (scp), and sshuttle routing someone web browsing look quite different from one another.

ssh sessions reveal enough that an interactive session, a file transfer (scp), and sshuttle routing someone web browsing look quite different from one another. Sure, you can multiplex and throw in extra traffic, but it's not trivial.