You are being disingenuous with your selective quoting;

Here is what the authors actually say w.r.t. the criticisms (all the comments are worth reading);

Our primary emphasis is ECC-256. Elliptic curve cryptography is widely deployed in modern systems, e.g., internet security and cryptocurrency.

For ECC-256, the space-efficient architecture uses 9,739 qubits with < 3-year runtime, the balanced architecture uses 11,961 qubits with < 1-year runtime, and the time-efficient architecture uses ~19,000 qubits with ~52-day runtime (or ~26,000 qubits with ~10-day runtime using higher parallelism). Space and time overheads are reported together within each architecture, not mixed across regimes.

The claim that our scheme requires 117 years selectively cites RSA-2048 under the most space-constrained architecture, which is one corner of a trade-off space we present clearly in Figure 3 of the work. We include RSA-2048 for completeness, and state explicitly that its runtimes are one to two orders of magnitude longer.

We believe our clearly labeled trade-offs constitute exactly the transparent resource accounting the commenter calls for.

Best regards,

Maddie, Qian, Robert, Dolev