I understand that. Well, I don't know what IND-CCA2 is. And presumably, therefore, my question. Does the 'spend' reveal the equivalent of a Bitcoin address? Or does the 'spend' merely provide a zero knowledge proof that the funding was legitimate?
This. :) (Alongside a demonstration that it wasn't spent before.)