Comment by r3trohack3r

> We can go through years of this SHA-1 to SHA-256 migration and then quantum computers break 256 and we're back in the same stupid boat again.

SHA-256 is considered quantum safe by the NIST and is left out of PQC migration guidance entirely.