@dsfgs
is designed for and I trust it completely. I advocate for and run a couple of Tor relays. Some further reading:
support.torproject.org/https/h
tails.boum.org/doc/about/warni

The key point here being that the exit node itself doesn't offer a layer of encryption, so the user must be using HTTPS, otherwise packet capturing is a very real threat.