[SAI_Peregrinus]

It'd be essentially impossible to add a NOBUS backdoor into ML-KEM, there's nowhere to hide a key. The reason not to go all-in on it is simply that it might be broken.