I won't address all your points because I'm phone posting, sorry. It seems to me that there are two ideal consumers of the tor product; the people who need to

I won't address all your points because I'm phone posting, sorry. It seems to me that there are two ideal consumers of the tor product; the people who need to use it because they are at risk of being identified in meatspace (needsecurity), and the people that are required to mask the first (providesecurity). The needsecurity group should not have js enabled because it has been shown to be insecure (correct me if I'm wrong). I would be happy if there was a big, red, fullscreen, flashing dialogue when tor browser was started asking the user which they were. I would/will be happier if/when major browsers transition to 'tor as normal' status and everyone is in the providessecurity group.