You're right, there aren't two reasonable sides here. There are people who want things to actually work, and security fetishists.
Uh... that's worse than a security fetish.
Insurance companies are putting incredible pressure for business to lock down their IT HARDER not less hard.
Seriously, look for tor to get blocked lots more places.
"security fetishists" are going to be making good money for a while yet.
We're rolling out tor blocking our sites where we didn't used to need that. I think more automated options as well will come (think cloudflare) which will help folks with this as well and maybe jam tor users into perhaps recaptcha loops or similar? Not sure what right solution is to filter out the tor users - hard block or try and detect and recaptcha etc.