Comment by kpcyrd

hidden service connections are end-to-end encrypted. Also, there is no exit node in a hidden service circuit. I think it makes more sense that they're in fact referring to a guard node, like another comment has pointed out.