Hackers obtain counterfeit TLS certificates for Google and other large services (arstechnica.com)

Can PQ certs and MTC solve for CA compromise as is described? Is this the cost of PKI instead of key exchange?

Source: https://blog.google/security/chromes-response-to-recent-cctl... (https://news.ycombinator.com/item?id=49981886)

More evidence to avoid anything other than .com, .org, and .net.