For the first paragraph, I'll take your word for it for now, but I'll read more into this later. Thanks.
Fair enough for the second paragraph. But like I've already acknowledged, you can't verify the Monero supply the way you're asking. My whole point is Bitcoin users can do this, but in practice *don't* do this. Almost no one exports the whole blockchain to excel to verify for themselves. Certainly no one does this every ten minutes. They just run a node and call it a day.
Not so sure that just because something is a critical vulnerability change would mean it isn't a hard fork especially if we're talking about rollbacks. Sounds like it would be a similar situation to the Ethereum vs Ethereum Classic split.
Sure maybe some customers would be honest and resend payment to merchants, but this is largely impractical to rely on and wishful thinking. Something tells me those millions of users who didn't do anything wrong and are now missing Bitcoin after a rollback would feel very differently.
Would you willingly sacrifice all your Bitcoin at the altar of 21 million? I don't think many would.