GM.
Been doing a lot of chatting with Copilot this morning at work.
Turns out that for the truly quantum paranoid, unless you need Taproot functionality, you should be aware that you can avoid all attack vectors with a P2WSH address that uses a hash only script. Because these scripts never use any CHECKSIG style verification, there is never the exposure of a pubkey, even while the transaction is in the mempool, making this 100% safe against Shor's algorithm.
Not that I'm suggesting anyone do this because quantum is FUD and these transactions are heavier, and thus, have more fees.
But if you're panicked, it's an option.