how do you secure this zk recovery path? can’t prove that only the hash of the pubkey was ever revealed (and thus that the secret key couldn’t be computed from the pubkey — as it was not available)

Idk, it’s also confusing to me. “I have been told” by someone who knows a lot more about cryptography than most people (including me) that it should be possible to, but I can’t see how because I suppose if you could spend the coins it means you must have the private key? But maybe it is actually possible to spend the coins without reverse engineering the actual private key, but rather only by faking the signature?

IDK.