Using Tor is legal justification for a warrant to remotely hack systems using it:
https://www.nolo.com/legal-encyclopedia/what-does-rule-41-sa...
As such, highly likely most systems running Tor nodes have been hacked and that Tor is not secure.
Very possible lockdown mode might be as well a legal justification for a warrant, given it “conceals” systems.