Agreed that shared secrets are not really that secret.

"it would have been very easy to address by just using Diffie Hellman when determining the session key"

Since WPA is implemented in hardware you must add gates to support Diffie Helman. This adds cost, resulting in a cost/security trade off.