>> don't run arm as the tor user

> Does this apply only to Debian, or Linux in general?


Linux in general. It's really just a matter of giving the process the least amount of privilege necessary.