Tor Browser should use onion domain instead of torproject.org domain(clearnet)
Why not use .onion for update check? Debian and some other OS now provide .onion access to their repository. It's a shame that TorProject itself don't use onion protocol actively.