I'm set up like this... It's not completely ideal, as I'd like to ultimately end my opsec with socks5 or socks5>RDP
My current setup is this:
Host>VPN>VM>TOR>VPN>RDP
the reason Tor is in there is because I'm using whonix and run a vpn within it that only routes trafic through regular browser not tor browser through the second vpn. That way I can have tor running and tunnel through vpn to RDP in the same VM.
Please tell me any considerations I should make

Host>VPN>VM>TOR>VPN>RDP you may go to jail this way
host>VM>VPN>TOR>RDP try this way
</br></br>

But I use whonix. Whonix recommends the host run the vpn so that all tor traffic runs through it. But inside the VM I run another VPN connection to a different server that only effects firefox but not tor browser. If i check browserleaks.com, firefox shows no tor nodes so i know vpn inside vm works

https://theintercept.com/2015/09/16/...ed-doesnt-bad/
Worth a read if your setting up with this config.
</br></br>