What’s wrong with secp256k1 ?

Satoshi went with what was available at the time and didn’t know much about ECDSA, apart from the fact that they worked.