It's all https nowadays. The most he could tell would be that the traffic was being sent to youtube.com he wouldn't be able to see which video was being requested.
With https, only the domain can be read everything else is encrypted so they can't understand anything beyond the .com or .ie or whatever the tld is.The youtube url would be visible which is enough to know which video is being watched.
Yes https://www.okta.com/identity-101/ssl-handshake/Interesting, I didn't realise that. The browser or app must request the SSL cert before sending the full url.