There is no standard saying that implementations MUST support P-256. So you're free to just turn on Ed25519.
And so far, I don't think NIST curves have been cracked? iOS secure enclave only supports them, for example.
And so far, I don't think NIST curves have been cracked? iOS secure enclave only supports them, for example.