Key Idea $\ $ Sets of positive integers closed under subtraction $(>0)$ have a special form, namely
Lemma $\ $ Suppose a set $\,\rm S\,$ of positive integers satisfies $\rm\ n, m\: \in\, S \, \Rightarrow\, n-m\, \in\, S\,$ for all $\rm \,n>m.\,$ Then every element of $\rm\:S\:$ is a multiple of the least element $\rm\:\ell\in S.$
Proof $\bf\, 1$ $\, $ If not there is a least nonmultiple $\rm\:n\in S,\,$ contra $\rm\:n-\ell \in S\:$ is a nonmultiple of $\rm\:\ell.$
Proof $\bf\, 2$ $\rm\ \ S\,$ closed under subtraction $\rm\:\Rightarrow\:S\,$ closed under remainder (mod), when it's $\ne 0,$ since mod may be computed by repeated subtraction, i.e. $\rm\: a\ mod\ b\, =\, a - k b = a\!-\!b\!-\!b\!-\cdots -\!b.\,$ Hence $\rm\:n\in S\:$ $\Rightarrow$ $\rm\: n\ mod\ \ell = 0,\:$ else it is $\rm\,\in S\,$ and smaller than $\rm\:\ell,\:$ contra mimimality of $\rm\:\ell.$
This above property yields a simple conceptual proof of Bezout's identity for the gcd.
The set $\rm\,S\,$ of all integers of the form $\rm\,a\,x + b\,y,\,\ x,y\in \mathbb Z,\,$ is closed under subtraction so, by the above Lemma, all positive $\rm\,n\in S\,$ are divisible by $\rm\,d = $ least positive $\rm\in S,\,$ so $\rm\,a,b\in S\,$ $\Rightarrow$ $\rm\,d\mid a,b.\,$ So $\rm\,d\,$ is a common divisor of $\rm\,a,b,\,$ necessarily greatest, $ $ by $\rm\,c\,|\,a,b\,$ $\Rightarrow$ $\rm\,c\mid d\! =\! a\,x\!+\! b\,y\,$ $\Rightarrow$ $\rm\,c\le d.$ Thus any common divisor of $\rm\,a,b\,$ that is of linear form $\rm\,ax+by\,$ is always a greatest one. The goal of the (extended) Euclidean algorithm is to search $\,\rm S\,$ for such a linear common divisor.
Remark $\ $ In a nutshell, two applications of induction yield the following inferences
$\rm S\ closed\ under\ {\bf subtraction} $
$\Rightarrow\:\rm S\ closed\ under\ {\bf mod} = remainder = repeated\ subtraction $
$\Rightarrow\:\rm S\ closed\ under\ {\bf gcd} = repeated\ mod\ (Euclid's\ algorithm)$
Interpreted constructively, this yields the extended Euclidean algorithm for the gcd. Namely, $ $ starting from the two elements of $\rm\,S\,$ that we know: $\rm\ a \,=\, 1\cdot a + 0\cdot b,\ \ b \,=\, 0\cdot a + 1\cdot b,\ $ we search for the least element of $\rm\,S\,$ by repeatedly subtracting elements to produce smaller elements of $\rm\,S\,$ (while keeping track of every elements linear representation in terms of $\rm\,a\,$ and $\rm\,b).\:$ This is essentially the subtractive form of the Euclidean algorithm (vs. the mod/remainder form).
Note: in more general numbers systems enjoying Division with Remainder (i.e. Euclidean domains) it is not true that $\!\bmod\!$ is equivalent to repeated subtraction, so in such rings the above descent is achieved by $\!\bmod\!$ (vs. subtraction), as in Proof $2,\,$ e.g. this is true for polynomial rings over a field.