CVE-2024-38365 public disclosure (btcd `FindAndDelete` bug)

No, it’s more fundamental than just which opcode to use. You commit to the signature in the scriptCode, which itself needs to commit to the scriptCode. Short of new signature modes (like ANYPREVOUT) which don’t commit to the scriptCode you need to use pubkey recovery.

Could you describe exactly how you think it’s possible to achieve the same without pubkey recovery?