Tribler should "just work", also when we add anonymity features.
Problem: only a few users will use anonymous seeding initially.

We will (soon) offer a fully anonymous "perfect dark" downloads from anonymous sources using introduction points, rendezvous tunnels, and end-to-end encryption. Traditional unsafe seeding will be disabled by default, in favor of "no unprotected public seeding".

However, our anonymous seeding method will have zero or only a few seeders in the beginning. This bootstrap problem killed a lot of other projects. Without a smooth migration path "perfect dark" downloads are not realistic. A lot of users will get disappointed if they try to download stuff, but nothing works due to the lack of anonymous seeders.

Anonymous downloading can be done from either: unprotected public seeders and hidden seeders. The downloader is protected using various layers of proxies. When the "perfect dark" option fails we need a fallback option: anonymous downloading from public seeds.
In case an anonymous download from anonymous sources fails to make any progress after 180 seconds of trying, the fallback option will kick in and activate proxied downloading using exit nodes from public seeders. The fallback option will be enabled by default and can easily be disabled.