Monero-first by default, two-of-three multisig on every order, and a working set of mirrors kept on rotation.
Two-of-three multisig escrow. Two-factor sign-in. Mirror rotation. Monero by default. Screened vendor entry. Staffed dispute desk.
Copy the first address by default. Move to a backup only if the challenge layer stalls on your circuit; all of them resolve to the same market behind the rotation. The clipboard receives the exact http://...onion string regardless of the line shown, so verify it once and trust your copy.