It gets my goat that people think it’s a good option. There are plenty of articles explaining some of the many issues with it, but a few are:
- It’s run by anti-LGBTQ+ crypto bros.
- It has ads right out of the box.
- It collected donations towards people who never signed up for them - then held them to ransom in exchange for the kind of information you should never share on the Internet.
- They’re a for-profit advertising company. “Privacy-centric” my elbow.
who and what is your threat model? as @macros@feddit.org pointed out this article was probably rather accurate.
if you just want to browse anonymously - it is likely, that even the biggest tech corpos can’t de-anonymise you.
if you do small time crime, like buying and selling contraband - likely law enforcement would try to catch you in the real world. you have more vertices and vulnerabilities there, different enforcement agencies are experienced exploiting these.
if you paint a big ass target on your back and get the interest of the CIA or similar - you are probably fucked one way or the other. they may have the ability to de-anonymise you. but if you listen to people that did get caught or do the catching (e.g: darknet diaries), most of the times it is a small mistake. if you only ever play defence, that is enough to loose the game. but what are your options if your adversary is a national agency?