I wouldn't call this trivial, but yes it's certainly possible. Well, it's possible for network traveling over the public internet in the first place. One of the main benefits of IPFS is that it's decentralized. If your friend has the content, and you connect directly to his machine and access it, the record of that access never left those two devices. A government would have to inspect them manually to detect the content in that case.
In simpler terms, it's every bit as traceable as traffic over the network it travels. Its primary advantage is, thus, not being tied to any particular network.
It is trivial, the command ipfs dht findprovs <hash> will list all the peer ids that do have the content in their repo so unless you blacklist every one but your friend (and he does the same) then the fact that you have accessed <hash> is public knowledge. You could also gc your repo as soon as you have downloaded that content but both of these methods defeat the whole point of IPFS.
In simpler terms, it's every bit as traceable as traffic over the network it travels. Its primary advantage is, thus, not being tied to any particular network.