Shielded Bitcoin: Private Transfers on the Bitcoin L1

Thanks, that makes the tradeoff clearer. A more private recovery would require scanning more data, while a faster targeted recovery could reveal more information or require additional trust in a service. That seems like something wallets should explain clearly before users need to restore—not only during recovery.