> In high-security applications when anonymity is already lost anyway There are countless sites that only serve static contents and yet cannot be accessed over

> In high-security applications when anonymity is already lost anyway There are countless sites that only serve static contents and yet cannot be accessed over Tor. Furthermore, many other provide an optional login that could be made to block Tor exit node, but the default settings of cloudflare still block the whole site. Additionally, "anonymity is already lost anyway" when logging on a banking website is incorrect. Users might want to protect their browsing from untrusted WiFi access points or nosy ISPs or country-level censorship. > (logging into a bank, for example) it is reasonable, due to the inherent risk, to block Tor exit nodes. How many attackers have the skills, experience and knowledge to successfully break into a bank and yet don't know how to anonymously rent a VPS or use a botnet or a compromised host or a starbucks WiFi? 0.0001%? [Edit: silent downvotes do not help.]