Someone in the Security Community mentioned that QC is only theoretically, this is not the case, see here. QCs are already running, only in data centers but they are running. My current research says that QC can crack already 72-Bits in under 8 hours, once they run 8 hours straight. The first ever QC that runs for public runs at 27 Qubits.
127 Qubits is the current standard. 65-72 Bits can be cracked already in under 8 hours.
The controversy exist because the systems are not reliable enough. The problem is here that you need to write new applications, in a new language and the practical application just does not exist yet.
I would take it serious and this is absolute not only theoretically.