Well one theory is that Tor Exit nodes aren't the only place that such an actor is "tapping" into network connections and can MITM the traffic. I.e. They might

Well one theory is that Tor Exit nodes aren't the only place that such an actor is "tapping" into network connections and can MITM the traffic. I.e. They might be tapping into the network at the ISP-level.