Some comments on the original article seems to place the blame of the de-anonymizing on user errors. As a crypto newbie, what is the 'correct' way of using Tor

Some comments on the original article seems to place the blame of the de-anonymizing on user errors. As a crypto newbie, what is the 'correct' way of using Tor to minimize security risks?