Thanks a lot for your feedback! The protocol we've deployed in our Betanet is not final. The Betanet is just about getting early community feedback and testing

Thanks a lot for your feedback! The protocol we've deployed in our Betanet is not final. The Betanet is just about getting early community feedback and testing in the wild. There will be lots of breaking changes. We will not use NIST curves in our mainnet for the reasons you mentioned. We are working on an implementation of ed25519 in WebAssembly. We will not use sha256 as in our mainnet. We are already working on a WebAssembly implementation of a memory hard POW. We want to bring blockchain technology to the masses. So in the long run we are explicitly targeting users who are not yet familiar with cryptocurrencies. Following from that we will put a lot of effort in creating user interfaces that take users by the hand and explain important aspects like "How to keep your private key secure".