When I have seen time estimates, everyone is referring to Mosca's Theorem. This is the idea that "store now, decrypt later", combined with the estimated time until a working quantum cryptanalysis is feasible, and a finite transition time for existing crypto standards and technologies (think update times for long-living tokens like ID cards with certificates) makes the available delay until a change must start quite short.
"The prize-winning Excel service is in high demand right now. We apologize for any delay this might cause. Do you want to become an 'Excel Prime Plus User' with preferential treatment? Just upgrade your subscription now and increase your productivity!"
ProtonMail and Tutanota, yes. Threema does secure messaging, Tresorit encrypted file hosting.
> With or without EU's snooping what is more likely to happen is that people will migrate to messaging systems that the EU can't snoop: WhatsApp, Signal, Telegram, etc.
Well, at least here in Germany people are more likely to migrate away from WhatsApp to Threema, Signal or Telegram.
I paid €0.80 for the app in 2014. Yes, that was a temporary discount, normal price was €2.99, I think. It is €3.99 now, single payment. I still wouldn't call that expensive.
I think one of the main problems protocols like XMPP and Matrix have to solve is the combination of good crypto + decentralization + offline-capability.
Most of my contacts (tech-oriented, Europe-based) are using Threema and I am most happy with it, especially because I do not have to share my phone number (or complete address book!). And the new video call capability is also working well. Unfortunately, most of the family is WhatsApp only. Since I will not use anything Facebook, they either have to use SMS or contact me via my wife.