Help me understand how a single UTXO could be used to rebuild a wallet.

You are correct the public keys are exposed in a transaction, where you send bitcoin like a purchase, and you are also returned the bitcoin back to the same wallet. This exposes the public. I learned something today.