Yep, great point, especially with how few of them there are. The density of Tor users is fairly low, but not bad. Looking at just the United States (because the distribution varies too widely from country to country to use the global statistics), there are 90,000 daily Tor users out of the 500,000 total daily users[1]. If my estimate of 3 million monthly users is correct, then there are 540,000 monthly users in the US. Out of a population of 310 million, that is 1 in 575 people. In a city of 100,000 people, there are about 175 Tor users, which is probably too many to bother investigating unless the vendor is moving kilos. In a city of 1 million, there are 1750 Tor users, so good luck finding the vendor. (Alternatively, the vendor could use an obfuscated private bridge, making him impossible to find by watching the network. That defense doesn't exist for I2P users at all.) OTOH, the density of I2P users is dangerously low. Assuming that the total number of monthly I2P users is 10 times the number of simultaneous users, that's 200,000 total monthly users. And assuming the same fraction live in the United States, that's 36,000 people, for a density of 1 in 8600. In a city of 100,000, there are 12 I2P users. In a city of 1 million, there are about 120. I'd say you're fucked if you ship out of anywhere except a handful of metropolitan areas in the United States. And presumably in many cases one can force downtime through application layer attacks, even if I2P is stronger to network layer DOS attacks. 1. It really is 500K, not 1 million: https://metrics.torproject.org/users.html#direct-users