Well, it uses existing PKI/CAs (ie, same as your browser), which I’m not sure GPG supports? I might be wrong.

You could certainly use GPG, but it’s not what others will be looking for. Depends on your use case, I guess.