Tor itself is not broken, but all it does is anonymize your traffic and therefore does not protected against exposure that comes form other sources. It does not prevent against things like browser fingerprinting (and other fingerprinting methods, see other comments in this thread), vulnerabilities caused by various content types (Flash/JS/Java) and a host of other issues an inexperienced user would not be aware of.