If the ISP is compromised by the cartels as you say, then this would just leave her open to correlation attacks (e.g. "who was using Tor at time X in city Y?").

If the ISP is compromised by the cartels as you say, then this would just leave her open to correlation attacks (e.g. "who was using Tor at time X in city Y?"). Opsec is not a simple matter, as the death of this woman shows and people like the grugq try to explain. You need serious technical nous to get it right.