Fine left curve, but in monero you need to be an active adversary to guess the transaction broadcaster, in cashu the mint absent any proxy always knows. There is an asymmetry there.

I'd say Monero's current cryptography is weaker, though that might change soon.