Aztec or zk.money, a Layer-2 roll-up, claims to make transactions not only private but also cheaper.
If I send 1 eth on L1 mainnet, all I pay is one gas txn to send it.
If I instead use Aztec's privacy layer, however, I pay the gas txn to transfer the 1 eth to Aztec's network, and then pay a 2nd gas txn to Aztec's smart contract to send the 1 eth to the real address of the recipient. That's 2 gas txns more than sending on L1 mainnet! How can that possibly be cheaper?