> Basically the attack vector from them is polluting the Tor nodes (so that they control enough of them to understand information), timing attacks on onion serv

> Basically the attack vector from them is polluting the Tor nodes (so that they control enough of them to understand information), timing attacks on onion services to figure out locations of people accessing the hidden services solely within in Tor, as well as undeclared exploits, and feeding local law enforcement around the globe the information about you. Nicely explained, and AFAIK, pretty much correct.