[throwawaylolx]

>only compromises the supply integrity

Conveniently, it's impossible to audit whether more coins are being minted right now to add to the developer tax already imposed on block rewards.

Don't think I misrepresented trusted setup--only warning others about the reputation of Zcash. Anonymity for some can be a critical issue, so I don't think everyone can afford to wait for "proof of backdoor" before making their decision.

[nootropicat]

Deanonymizing zcash's shielded transactions requires breaking the preimage resistance of sha256.

[ianmiers]

Technically, you could also break the encryption used in the memo field. But thats bog standard cryptography