Its pretty clear that #TorProject are compromised:
https://web.archive.org/web/20200301013104/https://trac.torproject.org/projects/tor/ticket/24351

All it takes to warn the user of a large-scale #manInTheMiddle (#AmazonCloudfront, #Akamai, #CFlare) is to display a pleasant warning page, prompting to "Go Back (recommended)".

#TorBrowser could store that the site is compromised so during subsequent attempts to visit, a similar warning appears preemptively.

An orange HTTPS icon would help too.