note that if you search his posts he talked about transaction privacy and didn't add it because of data size and compute requirements. and he would have used schnorr signatures from day 1 but the patent was only just expiring and there was no open source implementation with comparable performance to the ecdsa versions. both would already be in the protocol long ago but instead we got all the worst possible solutions. witness discount, taproot with naked pubkeys. the big blockers were bad but blockstream and co are way worse. within months of taproot going live the shitxoiners were all over it to the point tx fees were in the hundreds of sats at times. the sooner people stop pretending these promoters of shit on bitcoin are the enemy, and the people who promote them are scum, the better.