Because of the NSA'S ability to scoop up the most brilliant cryptographers, they're one of the few powerhouses that have the ability to put together a team effort to accomplish this.

Unfortunately, they've shown in the past a clear desire to sabotage implementations to include weaknesses that only they or perhaps other large state actors can take advantage of.

Any implementation of a quantum-resistant cryptography will face a large uphill battle in terms of trust.