I found this on the Wikipedia IOTA article:
IOTA uses Winternitz hash-based cryptography signatures instead of elliptic curve cryptography (ECC).[30][31] Hash-based signatures are much faster than ECC.[32]
Is speed the complete reason, or are their other factors that went into the decision?