Is it possible to prove any app is spying on you?

For example, I read that by examining network traffic, a user here found out that VSCode was transferring every single keystroke to MS servers. But couldn't they do it in batches and conceal them in larger packets such as updates, queries to the server etc.? I'd assume it'd be fairly easy for say, google chrome to log every key stroke and receive them in packets every time the client talks to google servers, and since they're encrypted and embedded in …

app conceal etc found keystroke network network traffic packets privacy prove server servers single spying traffic updates vscode