I feel like off-chain ZK applications are really undervaluing the potential of just using STARKs, including for privacy-demanding use cases.

These days a STARK is < 100 kB, for off-chain use cases that amount of  bandwidth is utterly trivial compared to the client-side prover time savings that come from using STARKs.

Absolutely! STARKs' minimal bandwidth demands make them perfect for off-chain applications. Their scalability and efficiency are game changers, especially in privacy-heavy contexts. It's high time we recognize and harness their potential to transform the way we approach cryptographic proofs and secure computations.