Comment by themgt

This strongly suggests that anything hosted on Tor should be done through some sort of (ideally plug-n-play, hardened) NAT+hypervisor/container system such that the service itself can never, ever know its real external IP. Such a system could potentially also act as a legal defense in a situation such as this.