> But then again you have ringt signatures which provide ambiguity to which outputs are actually used.

I know. But consider a transaction that mixes in its inputs two or more outputs created in the same transaction. Which is more likely: (1) both outputs belong to the actual sender of the transaction that had to merge them because a single one would not be enough or (2) they actually belong to somebody else, and just happened to be randomly selected from the same transaction by chance.

I can't do the math myself but I'm pretty sure number 1 is much more likely to happen than 2, and the more outputs Monero has, the stronger this likelihood difference will become.

I know the devs have plans to implement merge avoidance by default, as I've seen them saying that somewhere in reddit. According to your answer, I guess I can only wait for some of these two features (merge avoidance or coin control) to be available. Unless... do you know if any other CryptoNote currency has one of these features?

Thank you for your answer!