Why P2TRv2 and not P2TRH?
Ah i see your earlier points now apply to this question:
To that i say:
- The additional complexity is worth the protection and efficiency it offers. The alternatives are (1) when Q-day arrives, nobody has anywhere safe to send money unless we somehow solve the tripwire problem, or (2) prior to Q-day all EC witnesses are ~35 bytes larger.
- Batch verification still hasn’t been merged into core, even now 7 years after P2TR was deployed. The PR has not been touched in 6 months AFAICT. It doesn’t seem like anyone is in a hurry to get it working, so why sacrifice security for a feature we’re not even using?
- Can you cite real examples that make use of posting bare pubkeys in the SPK? I don’t know of any myself