It is a scam. Taproot addresses are vulnerable, but no one uses them.
If you always use unique addresses for your SegWit or Legacy UTXOs and never reveal your public keys, the quantum attack becomes prohibitively expensive. Google invests billions because the quantum scam will be the next covid scam...