I’ve read that paper, and I don’t quite understand how it would work when you need multiple clients to cooperate for a single client to make a payment. I.e. if the funds of 100 clients is at some multi-sig address, you’d save blockchain space, but payment from any of these 100 clients would require simultaneous cooperation from the remaining 99 clients. I have a hard time seeing how this would work in practice.