True, and hybrid cryptography is definitely the way to go.
But there's more to it than just resistance to cryptanalysis: crashes, memory leaks, disabled security features (e.g., ASLR), irregular performance, supply chain attacks...
PQC requires extra code, and every added instruction carries some risk.