I run an IPv6 enabled exit node and sniff the traffic for research purposes. The vast majority of the traffic is end-to-end encrypted and what's not has not been particularly revealing or illegal.