[berkes]

Almost a third of that chapter is explaining the shortcomings and caveats of the system.

> Some linking is still unavoidable with multi-input transactions, which necessarily reveal that their inputs were owned by the same owner. The risk is that if the owner of a key is revealed, linking could reveal other transactions that belonged to the same owner.