Dont blindly believe NIST, they have a track record of intentionally standartising weaker crypto so that the NSA has it easier, heres an article from a security researcher about Kyber, the one they say is “general purpose” (warning: long): http://blog.cr.yp.to/20231003-countcorrectly.html