I can try to steel man it but I've come around completely on it (was initially opposed ~2 years ago). CTV is powerful and extremely low risk.

I think it's instructive to note that CTV can be emulated right now by using throwaway keys and presigned transactions *except* that you don't have to worry about the key being thrown away and reused maliciously *and* you don't have to store the signature. Losing the presigned transaction completely hoses you, whereas with CTV you can recover it if the chain of CTV transactions is deterministic (can't think of why it wouldn't be).

Most opposition these days is "we should spend years bikeshedding the *perfect* version of CTV (TXHASH) or just completely misinformed.

I haven't seen it said but I imagine some people might say "well if you can emulate it why add CTV at all?"

1. CTV is secure whereas you have a ton of risk around key management in the presigned transaction scheme

2. CTV eliminates the storage problem for presigned transactions in well designed protocols

3. CTV is more efficient on-chain

4. CTV can be upgraded to do more, enabling it should help us figure out what we actually want out of later upgrade