This would basically be a Nostradamus attack. If we're going around claiming exciting (read: improbable) things about P256 I don't know what stops us from claim

This would basically be a Nostradamus attack. If we're going around claiming exciting (read: improbable) things about P256 I don't know what stops us from claiming the NSA can generate collisions in the hash functions it also chose the parameters for.