I agree with this. They just wait to find a small breadcrumb trail and then use ...

hnnnnnnng on May 10, 2021 | parent | context | favorite | on: Tracking One Year of Malicious Tor Exit Relay Acti...

I agree with this. They just wait to find a small breadcrumb trail and then use that construct a case. The identifying the suspect is done through hidden means.