You're clearly not a novice in this domain, but I'm having difficulty understanding your assessment without any sort of threat model. The risks you're detailin

You're clearly not a novice in this domain, but I'm having difficulty understanding your assessment without any sort of threat model. The risks you're detailing are likely insignificant for 99% of users right now. Using TOR doesn't imply a specific threat model, and that notion weakens tor security and anonymity as a whole.