Hackers obtain counterfeit TLS certificates for Google and other large services

Source: https://blog.google/security/chromes-response-to-recent-cctl... (https://news.ycombinator.com/item?id=49981886)

Can PQ certs and MTC solve for CA compromise as is described? Is this the cost of PKI instead of key exchange?

More evidence to avoid anything other than .com, .org, and .net.