This last point is not understood by most people, and it is not only enough to use tor, even ecash (cashu) is vulnerable to this.
quoting
note1rmz…jqgq![]()
https://www.reddit.com/r/Monero/comments/1g82047/malicious_node_ips_discovered/

quoting
note1rmz…jqgq![]()
https://www.reddit.com/r/Monero/comments/1g82047/malicious_node_ips_discovered/