OpenSSH has had support for a new post-quantum key exchange algorithm, sntrup761x25519-sha512@openssh.com, since OpenSSH 8.8. Is there any reason not to recommend it over everything else? Even leading-edge distributions like Fedora do not default to using it as of yet. It appears as though some documentation has been done for it: https://www.ietf.org/archive/id/draft-josefsson-ntruprime-ssh-02.html#section-1