Post-quantum: key exchange was the easy half
Hybrid key exchange is largely deployed; certificates and signatures are nowhere near. The real bottleneck is crypto-agility, because anything that hard-codes an algorithm or needs a firmware update can't pivot in time.
