Yea, sorry, stolen coins, most of which were probably lost. I agree research is good, but it does seem like “hash-based sigs in tapscript” is the one thing that we can do that isn’t dependent on some future post-quantum cryptography breakthrough. There’s some parameter tuning to do in picking such a sig format, but nothing wild.