[tptacek]

I don't understand. We didn't have hybrids for RSA while sieving improved.

[adgjlsfhk1]

RSA was the first. If ECC didn't exit, no one would be saying that we have to hybridize Kyber, but since it does, and the hybrid has ~0% overhead, it's very silly not to.