> PGP supports RSA. That's enough reason to avoid it.
I hate to break the narrative but age also supports RSA, for SSH compat:
https://man.archlinux.org/man/age.1#SSH_keys
That's only because SSH supports RSA. Mainstream usage of age with age public keys only supports X25519.
That's only because SSH supports RSA. Mainstream usage of age with age public keys only supports X25519.