That doesn't prevent the 99% of Tor users accessing hidden services exposing the location of the service to whoever is operating the majority of honeypot nodes.

That doesn't prevent the 99% of Tor users accessing hidden services exposing the location of the service to whoever is operating the majority of honeypot nodes. It also doesn't prevent owners of relay nodes from construing the origin of traffic. It may not be as accurate assuming the user routes their traffic through uncompromised entry/exit nodes, but given the resources certain agencies have they can cross reference ISP etc traffic logs to determine the identity of tor users.