Specifically:
- The first one is about why ML-KEM-768 and ML-KEM-1024 not meeting the corresponding NIST security levels is not a cause for concern.
- The second one calls for purpose-built IND-1CCA KEMs for ephemeral key exchange. They can have more noise, making them more robust against attacks.