If we someday want to replace quantum-vulnerable ECC, we want something compact, flexible and fast. Isogenies seem like the only candidate so far: 66 byte pubkeys, 148 byte sigs. I wrote a thing explaining isogenies, aimed at people who already know ECC.

Conduition

Bitcoin Devs Should Be Learning Isogeny Cryptography

How isogenies can solve Bitcoin's Quantum problems