This seems very sensitive to the quality of the hash function. If you had a distinguishing attack, or used something with MD construction instead of BLAKE3, it seems pretty likely that you would also have issues with the path mechanism.