The problem isn't blockchain.info, it's Phishing by rogue tor nodes.
A Tor user puts their credentials into these fake blockchain.info sites presented by a rogue Tor node, and then the hackers steal all your coins.
Is Bank of America to blame when people click links in phishing emails and type in their passwords to some dubious site?
Interesting, ok that makes more sense than my compromised email assumption. Added bonus that most TOR users are not the type to get the authorities involved...
I thought it had become obvious that TOR was kinda broken for a while now.