[fsh]

QKD is only safe against MITM if you have pre-shared keys between the parties. At that point you might as well use symmetric cryptography which is immune against hypothetical quantum computers and infinitely more efficient than QKD.