I had not researched this.
For a sovereign medium of exchange in an adversarial world, I'd still prefer Bitcoin's architecture - tight, ossified, cheap-to-validate L1 + truly sovereign (non-custodial, batch-heavy) L2s.
Monero's elastic block policy is elegant for burst handling, but it hands adversaries a bloat lever and raises validation costs over time, which erodes home-node density and increases capture surface.
This of course ignores:
- Bitcoin's recent L1 drift - rising default policy that tolerates junk payloads; heavier relay requirements; sync time creeping up year on year.
- Current L2s being mostly "convenience custodians".
Elasticity is a bloat vector in a world where the opponent's budget ≈ unlimited.
If you copy Monero's elasticity, you must add hard ceilings and anti-subsidy heuristics that make adversarial expansion uneconomic — which drifts you back toward... a de-facto small L1.
So it's pros/cons.
Pros for Monero:
- Handles short-term demand surges without massive fee spikes.
- Privacy defaults are strong; observability/censorship is harder at the transaction level.
Cons:
- The Penalty mechanism can be gamed by a rich adversary to expand supply of blockspace and bloat the chain.
- As chain weight grows, residential nodes drop. Privacy without verifiers still invites macro-level capture (ISPs, clouds, peering).
Ideally, I'd put the scale knob on L2, not L1 and scale by:
- More users per UTXO (channel factories, pooled channels, Ark-like constructions with constrained trust, etc).
- More settlement per byte (aggressive batching/aggregation, proof compression, periodic settlement).
- No custodial intermediaries that can be deputized.