Whonix theoretically provides better protection against de-anonymization via through-the-browser attacks, because it runs the Tor router and in a separate virtu

Whonix theoretically provides better protection against de-anonymization via through-the-browser attacks, because it runs the Tor router and in a separate virtual machine from user applications like the browser. So if the browser is compromised, it can't "phone home" to the attacker over the regular internet: all the attacker's traffic is obliged to go over tor, unless he/she can break out of the VM. Such an attack was used by the FBI to de-anonymize users of Freedom Hosting, a few years back. https://en.wikipedia.org/wiki/Operation_Torpedo https://en.wikipedia.org/wiki/Operation_Torpedo