Privacy issue with Monero wallet implementation

[viktya-lab]

There is a privacy issue with how change is handled in Monero wallet implementation. When you send a transaction and get change, it always goes to your main address (the 8... address) instead of a new sub-address (or at least the sender address). This makes it easier to link your sub-addresses back to your main address, which could compromise your privacy when tracing transactions.