P.S. and his answer is so "good" that he "forgot" (or: doesn't even realise) - that a public key is also exposed in the moment when the transaction goes into mempool, so if quantum computer will be able to break ECDSA in ~10 minutes - we are all f***ed... :)