Public key recovery for EC leaves in P2MR (BIP-360)

[sipa]

@ajtowns

The drawback is that the script spend path requires you to reveal P, so in the event of Q-day occurring and spends in the mempool being vulnerable to attack, then your coins are frozen until keypath spends are disabled.

This means the output type cannot be used at all, post Q-day, before EC disabling, because the PQC paths are inside the scripts?