> Elliptic curve (secp256k1, ECDSA)
Isn't secp256k1 and ECDSA prone to implementation errors? Why not use EdDSA instead? :)
Using the same primitives as everyone else is probably a conservative choice.