Using montgomeryLadder for that makes it ~5x slower that BASE.multiply
Given that there is no input apart from private key itself, an attack on that should not be possible
In the same sense as it's not possible on ed25519.getPublicKey
Or this could be a separate method
See #223 for a PoC
