Meanwhile you have ignored all other potential attack vectors. Fingerprinting (remarkable how little entropy it takes to identify an individual), zero-days that escape Tor's sandbox, etc. Why does Tor browser even ship with javascript enabled? Why aren't major fingerprinting features disabled a la carte?

The point is if you cannot assure anonymity with 100% certainty, you are simply setting people up.