Broken means it doesn't do what it claims, is assumed, or is known to do. I think the general consensus is that Tor is supposed to enable a person to browse the internet anonymously.

Are seatbelts and airbags broken because people still die in crashes? Most security mechanisms can be circumvented by a sufficient state actor. For most purposes, when not being targeted, Tor does its job.

Do you have a source?