How is this not correct? Apple knows when I open Tor browser, which enables a timing attack.
Resigning will appease Gatekeeper. As a result there will be no X.509 compliant OCSP checks made for the developer certificate - because it won't be there any more.
The Tor browser folks could do this as a privacy and security feature for you.