>I guess this approach works fine for an individual, but if everyone has to run their own guard node to be safe, why would anyone connect to your guard node

By the time a few percent or tor users are running a guard node, KAX17 would be too diluted to be a real threat.