"Safecurves exists because all the standard curves appear to be backdoored. Curve25519 is not a standard curve.
This was your original stanza that I objected to:
"The problems are all in establishing keys. For that there are currently only two choices in use. ecdh. which all the standard curves appear to be backdoored. and rsa, which the russians reckon they have broken."
You were insinuating that basically there's no safe way to establish secrets (using some form of ecdh). While there absolutely is. Here's the list of open source packages using (safe) Curve25519 :
https://en.wikipedia.org/wiki/Curve25519
In 2014 OpenSSH[14] defaults to Curve25519-based ECDH.
Libraries[edit]
Libgcrypt[15]
libssh[14][16]
NaCl[17]
GnuTLS[18]
mbed TLS (formerly PolarSSL)[19]
wolfSSL[20]
Botan[21]
Libsodium[22]
OpenSSL since version 1.1.0[23]
What else do you want from a "standard"?