> Tails browser on [almost anything] is one browser exploit away from beaconing out directly from your IP

as far as I am aware Tails use IP tables to force all network connections through tor. You would require an escape from the browser and then a privilege escalation to get around this.