Whonix now provides a hardened vanilla Debian spin (no Tor used) that ships a version of Tor Browser that is exactly this. It is rebranded so people are not confused about what it does.