Sure, but as you mention, Tor can sometimes make exposure to attacks worse, more details are required to make a better analysis.
It is difficult to verify if ethereum nodes are also Tor nodes, but I suspect you can do this verification by using sites like this to a list of Tor nodes and a scripted ethereum node to generate a list of all the ethereum nodes and get the intersection of those lists.
I suspect that the faster block times of ethereum make Tor less appealing, but without use-case specifics it's difficult to be sure.