Every few months, another “quantum-safe” technology is marketed as the real answer, usually with the claim that post-quantum cryptography isn’t enough. PQC is too new, too slow, too fragile, too unproven. One person I spoke to even described adopting PQC as “shuffling the furniture on a sinking ship,” as if the standards effort itself is the problem. These lines get attention, but they don’t hold up once you look at how actual systems work. The alternatives being promoted, such as QKD, information-theoretic schemes (for brevity, “ITS” here means non-QKD physical or theoretical methods), and specialised hardware, focus on securing a link or a tightly controlled environment. What they ignore is ...