From following link: Breaking TLS with Netsh/WireShark

I found its pretty easy to segregate the keys file from tcp requests and later decrypt with WireShark.

Are there any reliable/bullet-proof methods that can prevent such decryption of TLS 1.3.

How those tcp packet traces segregate the keys from overall traffic.