Simple. We will have a nostr private key and data model anyway. It's just reusing it for QRs. We don't need to recreate it for PGP. In time, nostr will be so popular that using anything else won't make any sense.