Vitalik: ZK cannot provide coercion resistance and needs to be combined with FHE and other technologies

Jinse Finance reported that ZCash research expert c-node posted that MPC, tFHE, and TEEs can be used to build privacy applications that cannot be achieved with ZK, but their privacy strength is relatively weak. It is recommended that use cases such as payments, transfers, and voting should prioritize pure ZK. Vitalik Buterin replied that ZK itself cannot provide coercion resistance, and in scenarios such as voting, it is still necessary to combine trusted parties, MPC, FHE, or TEE to achieve this feature. We can improve system security through layered architectures such as ZK+FHE; even if FHE is compromised, all privacy attributes except coercion resistance can still be retained. I suspect that similar situations also apply to almost all other cryptographic application scenarios besides zero-knowledge proofs.