oh, boy. Whonix is such a crap and people using it for anonymity makes me sad. Of course users should make their sys-tor (or sys-whonix for that matter) vms disposable, and yes, they should configure their Tor guards.
Maybe I take this as motivation to finally put up my sys-tor salt and torrc here.