I wouldn't call this trivial, but yes it's certainly possible. Well, it's possible for network traveling over the public internet in the first place. One of the main benefits of IPFS is that it's decentralized. If your friend has the content, and you connect directly to his machine and access it, the record of that access never left those two devices. A government would have to inspect them manually to detect the content in that case.

In simpler terms, it's every bit as traceable as traffic over the network it travels. Its primary advantage is, thus, not being tied to any particular network.