Also, _even if_ we steel-manned the design and imagine SGX is truly only used as a "defence-in-depth" layer on top of a ringct blockchain, using SGX to prove th

Also, _even if_ we steel-manned the design and imagine SGX is truly only used as a "defence-in-depth" layer on top of a ringct blockchain, using SGX to prove that SGX Lightning nodes weren't keeping transaction info would still be better privacy under many circumstances. Lightning transactions are ephemeral: once the transaction happens, _no_ data about the transaction actually needs to be kept by anyone, let alone on a public blockchain. And only the peers directly involved in the route ever learn about the transaction directly. Whereas with SGX, if SGX is broken in the future - and it will be - the statistical analysis on the underlying blockchain data is still possible. And unlike MobileCoin, this design wouldn't put SGX in any kind of trust or custodial position at all: if SGX failed, you'd just close the Lightning channels the same way any other Lightning implementation would, and open new channels with non-SGX peers.