tor broswer javascript.options.ion.content

There's a reasonable case that TOR is run by some US three-letter agency, but even that is by no means certain. 'Nation state attackers' don't possess unlimited and/or magical capabilities. If the site you visit is shady enough then that has also been compromised and is serving you malware over HTTPS. This applies even if the HTTP site you visit is not compromised or dodgy since the exit node will rewrite content on the fly. So you should assume that everything you load over HTTP has been trojaned or contains attacks like EgotisticalGiraffe. It still loads stuff over HTTP if it doesn't know of an HTTPS alternative to that particular site. The Tor Browser has HTTPS Everywhere which is rather misleadingly named. In addition you should assume that the exit point is owned by an attacker, which means they know which sites are receiving Tor traffic. For example you should assume the entry point is owned by an attacker, which means they know via your IP that you use Tor, how often, and at what times of day you do it.

Tor broswer javascript.options.ion.content