What does compromising the exit do? I thought the layering means you would need to compromise the entire path to do anything.
If you don’t want any MITM possibilities, that’s what the onion services are for (both client and server are speaking over tor connections)