I love how people refer to quantum-resistant cryptography as "pq" when actually it's all about moving away from having to juggle F_p and F_q.