> the safest path forward is to assume encryption is broken and move to post-quantum crypto before we “need” to. An even safer path would be to use both "class

> the safest path forward is to assume encryption is broken and move to post-quantum crypto before we “need” to. An even safer path would be to use both "classical" and post-quantum methods in combination ("hybrid"). You're protected against someone building quantum computers (and inventing new math to break classical cryptography, which is less likely) and also against yet-undiscovered weaknesses of post-quantum primitives.