There are a few stream isolation preconfigured but not preinstalled applications. See list:
Stream Isolation
Would consider merging a patch.
Bug Reports, Software Development and Feature Requests
But generally I am not sure if there where lots of contributions to configure stream isolation for lots of not pre-installed applications. Would think about it at the time.
Interesting. Might look later.
One nitpick.
Just judging by title: Tor isn’t resilient to Sybil attacks either.