Burning a compromised host just to run a public proxy client for pennies would be the worst trade-off imaginable for an attacker. It is loud, easily caught.