Not broken. Exit nodes. One has to assume all unencrypted TCP traffic will be recorded and potentially modified (MTIMed). Consider we have that system wide tor

Not broken. Exit nodes. One has to assume all unencrypted TCP traffic will be recorded and potentially modified (MTIMed). Consider we have that system wide tor proxy instead of the torbrowser bundle. Now exit node operators get all your TCP traffic. It's fine if one knows what they're doing[0], but if that was the default way for the average user to get on Tor? A privacy and security disaster IMO. Not only would we not provide mediocre privacy, we'd actually endanger people. [0] and you've got proper stream isolation, which I'm not sure how possible it is system-wide with unmodified software