Why do we want ECC in OpenPGP?
I'm not againts ECC in OpenPGP in the future.
If someone want to use strong public key cryptography protection as
well as RSA-2048, ECC-193 is good choice. But I don't need it today.
I think if RSA-1024 is broken easily, a quantum computer must be. In
future, developed quantum computation technique will also break ECC
because problems are in almost same domain of number theorem.
Anyway, I'd like think about it tomorrow, not today.