i stayed up way too late last night to learn about how schnorr signatures work. the pubkey is effectively like part of the signature value, in fact. probably satoshi chose ECDSA because it was easier to find but also for being able to use pubkey hash construction but you can't do that with schnorr.

Replies (2)

this is the tradeoff that schnorr gives you: no signature malleability, the pubkey X is like a malleability protection. the pubkeys must be in the spend transaction along with the signatures on the out-points being spent. so they are not so much smaller in size than p2pkh transactions actually. in fact slightly larger
I believe Schnorr could not have been used at the time due it being protected by a patent, which seems to have expired only in 2010 according to Wikipedia