Maybe in general "we need more security audits" should be a point in the list Or is there something more specific I'm missing for a Tor section of the list?

Tor is imho the backbone of our privacy. We need to donate more for ita development and node maintenance and/or run a node ourselves if we have the technical skills and expertise to do so.