The link shows that well-established security practices are often not followed, even by those who really should damned well know better.

Which is to say: even when PQC mitigations against QC are available, I expect a target-rich environment for QC attackers.