Are you asking what they should use instead? Because there is no alternative. My point isn't that they should be using some other specific piece of software, or even that they shouldn't be using Tor, just that they should be aware that Tor is old software with many known vulnerabilities, a poor track record of security including active RCE attacks by governments and private companies, etc. If you go to the homepage, you'll see none of that.

This might not deter people from using Tor entirely, but at least they'd understand the threat model a bit better so they could change their behavior accordingly, for instance maybe not using it at their own home, not using it for Facebook, etc.

As much as we might want to believe that we can code our way out of anything, human rights demands more than software.

> Because there is no alternative.

Just out of curiosity and for purely educational purposes (I admittedly know very little about the topic), how about something like I2P or FreeNet? Are these at all viable alternatives?

What other choices do we have for "anonymity" outside of the usual VPN/Proxy?

Anonymity isn't binary. Perfect anonymity is, and always will be, completely impossible. Practically speaking, we can only talk about reducing risk in different scenarios.

I like I2P as it has a reduced threat footprint compared to Tor as it's all internal, but it's also a smaller network, probably more vulnerable to Sybil, less audited code, etc.

Again, my point is that there is no perfect solution, it all depends on the situation and the requirements.