Tor is great except it suffers from something a lot of tools in general but specifically privacy tools suffer from: administration has some gotchas that, if you don't know exactly what you're doing, you'll fuck up and not find out until the long dick of the law is up your ass.

Imagine running a service, a dissident service, you're doing nothing wrong but you're doing something illegal and you disagree with the law on principle, victimless crime all that. Or, just something that 10 years later a regulatory agency decides was illegal the whole time. Whichever.

How can you set up Tor such that it is bulletproof? Not bulletproof in that Tor is magic, but in the sense that all the security guarantees you theoretically get form Tor, you practically get from it, that you're setting up your service 100% the right way. One fuck up...

There are tons of services that then one could offer and make it totally unenforceable to do anything about. A swap service with absolutely never for any reason no KYC, guaranteed is a good example of that.

Is there out there in the world a perfect walkthrough of how to set up a service of any kind with Tor that leaves someone only exposed to the vulnerabilities inherent to Tor or those inherent in the nature of the service provided? If there were, I'm sure there would be a lot more services like that.