Monero pays a large price for its fungibility, by making the UTXO set of (potentially) unspent outputs equal to the set of ALL outputs. Whereas synced bitcoin full nodes can forget all about spent outputs, Monero full nodes must keep some info about them, and be able to efficiently index this info.
For its initial block download, a node must download and verify rangeproofs for all outputs, not just the unspent ones.
Wallets must be able to sample decoys from a large fraction of all historical outputs.
For its initial block download, a node must download and verify rangeproofs for all outputs, not just the unspent ones.
Wallets must be able to sample decoys from a large fraction of all historical outputs.
This makes Monero much more bloated than Bitcoin.
A more detailed comparison between Monero and Bitcoin can be found at https://gist.github.com/phyro/ec37d8bfedd36102b0ea5824580d06...