Interesting, and sensible. It's about what I would expect. It seems that the Tor Project has no public security policy At least, I don't see it on the website. But from what I've read here and there, it's very much like the OpenSSL Project's.
