Turns out secp256k1 for Nostr wasn't such a bad idea: 
Bitcoin Stack Exchange
Why does BIP-340 use secp256k1?
If the entire Taproot/Schnorr soft-fork was going to implement an entirely new signing scheme anyway that was completely independent from the previ...