In theory, it is also broken.

It practice, it appears to be slightly harder to break than RSA for the same security level as we define it in non-quantum computing, but not by much.