Clearnet hubs exist to redistribute pointers. Markets live on .onion. Typing a market password on a .com “mirror shop” is an own-goal — you trained the attacker with a real credential.
Hubs can be useful after a full outage if they are already on your trusted list. They are never the place to finish authentication. Finish on Tor Browser after phrase check.
Trusted hubs sit on Dark Markets → Trusted mirrors.