The joke about the only secure computer being disconnected inside a safe expresses an important limit: useful systems operate in a world of uncertainty. Security is not a promise of zero risk.
That is why experience does not make backups unnecessary. It makes them more important. Protecting information includes preparing to recover it, not just trying to prevent every possible incident.
Computing history includes both people who test systems with permission and people who exploit them without it. The tools alone do not settle the ethical distinction. Authorisation, intent and the way a result is used matter.
Kali Linux brings together tools used in security testing. Tor uses onion routing to help protect the origin of network communications. Neither is a magic shield, and the presence of a tool does not establish that an activity is legitimate or safe.
For everyday users and organisations, practical protection comes from several layers: keeping systems updated, controlling access, using strong authentication, maintaining recoverable backups and learning to recognise suspicious messages and requests.
Antivirus software can help against some threats, but cannot prevent every phishing attempt. A firewall can help control network traffic, but cannot guarantee that a service will remain available under every attack. Each measure has a purpose and limitations.
Good security combines prevention, detection, response and recovery. It also requires people who understand what to do when something looks wrong. A collection of products is not the same thing as a security practice.