It is. In Germany at least all communications must be encrypted. And often multiple meters will communicate via one gateway.
Though, if someone has the time and technical ability to implement this kind of surveillance then there are probably easier ways to get better info than inferring activity from energy readings.