Everything is already vulnerable to theoretical quantum attack. I work with large enterprise IT and hypersclalers and I can tell you- none are working hard on this. There are a small number of research projects but that’s it. Banking absolutely not. Military, yes through the DOE and partnerships with tech. Unfortunately, I’m not in the weeds enough to understand the use cases for quantum other than a cyber weapon.