I wonder if that would impose liability on the tor project itself or tor node runners.

If it did, you can substitute out this SEI story with the CIA just secretly directing multiple tor node owners to run special versions of their software without notifying users.