Let's not compare shady developers and their shitcoins with big companies and their marketing departments.
Yes, but every piece of software has bugs, using that as an argument is not very strong unless the bugs are found but never patched. If the software is open source, and the community is active enough that there is a reasonable expectation that due diligence has been performed, that's the best we can hope for (that heartbleed bug though

).
You're stating the obvious though.
Yes, I was giving a more compelling argument than "bugs in software". A lot of the traffic analysis that can be done comes from controlling exit nodes, which is why I went on to outline the best way I think a crypto could try to use Tor for maximal anonymity. Yes there have been (probably still are) traffic analysis attacks on hidden services, but it's still the most secure way to use Tor in all likelihood. I think for most people, a properly implemented Tor crypto is enough to consider yourself more secure than someone can be bothered with, but if you're a real multi-million dollar drug money launderer, probably taking some extra precautions would be wise

There is absolutely no reason to do this when there are existing solutions such as Monero.
now this coin is scam or not?
Yes.