Monero

I think that ASIC resistance is still incredibly unwise and that it worsens the ASIC centralization issue. (ASIC manufacturers have the incentive to mine with their ASICs until the parameters change, then sell them for use on forks)

Monero is less scalable because you have to store all tx outputs (key images) instead of just unspent tx outputs, since Monero does not know which outputs are fully spent (for larger ring sizes). And these must all be stored in fast random access memory for double spend prevention. That’s an ever-growing pile of data! While in Bitcoin you can offload older utxos to a slower memory, because the access pattern is “utxos die young”. Also, utxo set grows much slower or even can be stable (“1 utxo per person”) while tx volume grows forever. Bitcoin scales way better than Monero or Zcash (that has the same requirement to store all “nullifiers” to prevent double spending).

Monero is considered the gold standard among private coins largely because it started with domain experts in privacy who took all the right steps in the formation and design choices for a private coin.

Monero and BTC are the only two cryptocurrencies I've ever publicly recommended for investment. I'm a big fan of the XMR devs and the Monero ethos.

You know Monero is the real deal because US Attorneys routinely have to say ¯_(ツ)_/¯ in court filings describing seizures thereof.

22 days until Monero has Ed25519 bulletproofs. But the real question is, how many days until a critical vulnerability arising from the naive repurposing of Ed25519 “ref10” arithmetic is discovered?

Seems pretty reasonable to me that almost all PoW-GPU coins that aren't ETH are prone to being 51% attacked, at least until ETH moves to full PoS, at which point it's likely to become XMR I think (could be even sooner depending on FFG economics).