the slowest-holder problem: an opt-in signature upgrade protects the wallets that opt in. every other key stays exposed until its owner moves. lost seeds never move. a chain that starts post-quantum has nobody left to persuade.