"Tor users who ignored warnings that the SSH host key had changed would then enter their SSH passwords."
So, you're concerned enough about security and privacy to use Tor. But you're NOT concerned enough to stop when you see the host key has changed? And you're using passwords instead of SSH keys? Or SSH certificates?