Conclusion

I want to re-iterate that you don't need to use super secure practices to purchase some new underwear. Not to mention that would be shipped to your address and purchased with your credit card. The correlation between your name, address and credit card number cannot be broken once made, and is difficult not have that data been correlated in the first place. But uBlock origin is easy to install and reduces attack surface significantly by itself even if you don't use anything else mentioned.

But don't use uBlock origin or any other browser extension on Tor browser. Browser extensions can have malicious code and them so best practice is that your Tor Browser should have no additional code.

The more uncommon attacks are generally used against high value targets. If you're reading this, chances are you're not Edward Snowden or Julian Assange. Be aware of the kind of attacks that can happen, and atleast do the easy stuff to protect your data.

I do not condone illegal or immoral activity, be safe and don't do anything stupid!