read-through of https://jimmysong.substack.com/p/taproot-vs-security-threats-bitcoin