Yup, the only way to really hide metadata is for every device to talk to every other device constantly, either with "real" data if they have something to send or "padding" if they don't. That way a sniffer can't tell who you're sending real data to. Everything else is vulnerable.