It seems Tor users cannot expect privacy in any real sense. Using Tor, they can reduce the identifying information they provide to operators of websites they visit, but they cannot expect to benefit from any more security than that.
I find this sad and hope that we can bring about a revolution: actual privacy when using the Internet.