I just downloaded and installed the TorBrowser.  Yes, it looks like Firefox.  I've added it to our list of things to do.  It should be easy but will probably take some weeks based on the current pipeline.

Except one thing might require some weird programming.  To my surprise, I confirmed your statement that bookmarks (and all user data) are stored in the application package.  Under any circumstances I can imagine, and according to Apple guidelines, that is so wrong.  For one thing, it makes backing up a mess – people on a backup budget back up only their Home folders and not /Applications.  Also, this means that either different Mac users have the same bookmarks, or, depending on permissions, other users cannot use the app.  It appears that they chose the latter.

Do you have any idea if there is a reason for this (incorrect, as far as I can see) design decision?  Or is this just the result of a quick port from Linux – they didn't have time to fix it or no Mac developers on the team who knew that user data on a Mac belongs in ~/Application Support?