CHECKSIGFROMSTACK only really makes sense with something like TXHASH so that you have something to sign, I guess. Building a covenant with just CAT+CSFS is indeed not reasonably feasible, I agree with that. Though look at what the BitMatrix guys have built, it’s pretty impressive, though obv it requires arithmetic too.