Quantum attack and compute is coming a lot faster than people think. Never underestimate desire, invention, network effects. Utter shame PQC defence field is being bogged down by stodgy old cryptographer naysayers downplaying quantum. Expect the world to get caught with its pants down by quantum. You've already got 2^256 in traditional legacy crypto. Now go develop and apply quantum safe version that reaches 2^256 equivalent in quantum hardness.