I don't see TLS adopting anything other than the current hybrid or a pure Kyber, but Bas would know better than me. Signatures are very difficult to do hybrid

I don't see TLS adopting anything other than the current hybrid or a pure Kyber, but Bas would know better than me. Signatures are very difficult to do hybrid in a way that's not strippable. I think lattices are in the realm of boring crypto these days, but I ask the actual mathematical cryptographers when I need real opinions.