if it's possible that the threat is so well hidden that the security software can't pick up on it?
Of course yes. Antiviruses are widely over-estimated.
But what you described here is more likely to be just normal Orbot's behavior.
It consumes 100% CPU & memory, so everything else freezes. Not for slow devices.