You should not connect to a web wallet nor run a full node via tor.
I ran a full node via TOR for a while. No big deal. It has long been known that exit nodes can sniff plaintext data leaving and entering their node. That does not mean they can spend from your wallet. Remember that any transactions you send to the network-- are intended to be put into the public ledger.