Yeah I feel like the article glosses over the fact that PQ is not about crypto flexibility but specific crypto flexibility that is immune to a hypothetical QC a

Yeah I feel like the article glosses over the fact that PQ is not about crypto flexibility but specific crypto flexibility that is immune to a hypothetical QC and a lot is sacrificed to achieve that goal (namely signature sizes and/or in some cases performance). And no, you shouldn’t be using RSA but they completely gloss over that we have very very good ECC standards that in no way seem to be suffering the same problem as RSA (ie needing to regularly increase the key size) which is why afaict everyone has pretty much switched to ECC signatures unless they have some legacy reason.