Thanks for taking the time for this thorough explanation, it’s very much appreciated.
Yes, this is a little tricky, but that might be something that solves itself with conventions. If the convention becomes to use capset variables rather than reach capabilities, most people won’t even be aware of this difficulty.