[snagglegaggle]

Yeah, I know all of this. Smart cards are kind of the exception because they aren't reprogrammable. But security costs money. As you've made it clear your business and customers prefer cost to security.

[bdamm]

They're willing to pay for security, but they don't want to pay a penny more than they must. Security is not, and never will be, an open-ended budget.

[snagglegaggle]

So they prefer cost to security. That's fine, most people do. If being quantum resistant was a priority they would figure out a way to do it and it may be similar to what I described, or not; but it could happen without hardware implementation if it was truly desired.