The Fietsersbond (Cyclists' Union) isn't against wearing a bike helmet. If you feel confident, you cycle more safely. It can be wise to wear a helmet in high-risk situations, for example, for seniors on e-bikes. Unfortunately, it has been proven multiple times that forcing people to wear a helmet actually backfires. People start cycling less.
A helmet mandate makes cycling feel more like a dangerous activity—something you should be afraid of. Getting around by bike also becomes more complicated. After all, what do you do with that helmet when you're not wearing it? And what happens if you forget the helmet or if it gets stolen? These are all factors—whether justified or not—that make choosing a bike less convenient.
Simply reducing the complexity of the standard to "pure ML-KEM" could already be considered enough "NOBUS" to be workable, such that the focus of attacks can be only on it (and bonus NOBUS if weaknesses are already known).
Sure, it's not completely free, but the hardware and implementation points seem relatively minor. Once CRQC exists the capacity will certainly not be unlimited, so there will surely still be use for encryption using ECC and "dragging it around" is not so bad.