Fixed size seems fee vulnerable and why highlight your privacy set with such a flag?
It'd be kind of normal to be fixed size. Just like a signature has a fixed size, so does a zkp.