The previous encryption methods didn't rely on asymmetric encryption, and VPN software nowadays often provides an option to use an additional symmetric-only key

The previous encryption methods didn't rely on asymmetric encryption, and VPN software nowadays often provides an option to use an additional symmetric-only key to protect the handshake. (This makes it quantum-resistant against attackers that don't have the symmetric key, while allowing to use DH to get forward secrecy against non-quantum attackers that later gain access to the key). Does WPA3 maintain this protection, or is it now open to quantum attacks? Also, is there a mode to allow connecting to open networks with authentication based on TLS certificates and domain names? For example, the SSID of the network could be a domain name, and the network would present a certificate for that domain (or some well-defined subdomain) to prove that it's indeed that network. This way, if you know the domain of the entity you're connecting to (e.g. a hotel), and see a WiFi with that name (and have a client that doesn't allow unicode for this mode), you could connect securely.