[Run_DOS_Run]

>Because there's nothing stopping anyone from setting up exit nodes and analyzing the traffic.

This should be assumed. So what?

In 2023, almost every website supports https and unencrypted traffic is the exception, not the rule. So if someone sets up an exit node, they can only collect metadata from a few circuits from a competent user. Of course, this becomes a problem when someone sets up hundreds or thousands of nodes, but that - including statistical analysis or the use of 0-days - can only be done by a small minority.