Using Tor is legal justification for a warrant to remotely hack systems using it:

https://www.nolo.com/legal-encyclopedia/what-does-rule-41-sa...

As such, highly likely most systems running Tor nodes have been hacked and that Tor is not secure.

Very possible lockdown mode might be as well a legal justification for a warrant, given it “conceals” systems.