It appears another "gigaleak" has gone down, involving Nintendo. According to sources online, it appears that Game Freak has been hacked, resulting in internal data from the company being leaked to the public. Those involved in the hacking community or those within general Pokemon related groups...
Tor
Tor is only as safe and as secure as the person using it.
Most people think just installing Tor and running protects them and their identity. Most don’t even look at things like DNS leaks or think a VPN plus Tor helps, that being said. Tor and Mullvad are probably as private and as secure as you can get by default.
This is bad advice. Using a VPN with tor makes you much easier to track.
Definitely, you don’t need a VPN. If you’re really worried about your first hop traffic standing out or being blocked, use the obfs4 bridges.