This question is inspired by the recent, beautiful work On the Cryptographic Hardness of Finding a Nash Equilibrium by Bitansky, Paneth, and Rosen.
Their main result is that the existence of indistinguishability obfuscation ($i\mathcal{O}$) and subexponentially-secure one-way functions implies that the $\mathsf{PPAD}$-complete search problem $\mathsf{End}$-$\mathsf{Of}$-$\mathsf{Line}$ (see for example, my old, old question) is worst-case hard for polynomial-time algorithms. Recall, of course, that the search problem of finding a Nash equilibrium in a normal form game of three or more players with specified utilities is (correct me if I'm wrong) known to be $\mathsf{PPAD}$-complete from a sequence of works beginning with the breakthrough of Daskalakis, Goldberg, and Papadimitriou. [Update: Finding two-player Nash equilibria is PPAD-complete -- Thanks Akshayaram Srinivasan for pointing this out.]
Independently, a (the?) major question in theoretical cryptography is to construct cryptographically-secure multilinear maps from $\underline{\rm standard}$ assumptions, in particular from the Learning with Errors ($\mathsf{LWE}$) assumption [Regev05]. (Any secure multilinear map, in turn, implies efficient indistinguishability obfuscation for $\mathsf{P/poly}$, landing us firmly far, far into the land of Cryptomania.)
However, this goal raises an interesting question: Suppose the Crypto community (sometime in the next year or few) jointly produces an appropriate reduction from the standard Learning with Errors assumption to the security of some indistinguishability obfuscation scheme for all circuits. Note that $\mathsf{LWE}$ is believed to be hard for quantum adversaries, formally by quantum reduction from approximating $\mathsf{GapSVP}$ to polynomial approximation ratios. In turn, $\mathsf{GapSVP}$ is "believed hard" for quantum computers itself, intuitively by $\mathsf{GapSVP}$'s "relation" to the Non-Abelian Hidden Subgroup Problem ($\mathsf{HSP}$) -- whereas Shor's algorithm solves the Abelian variant of $\mathsf{HSP}$. (If someone wants to independently fill me in more on the history/relationship between $\mathsf{GapSVP}$ and the Non-Abelian $\mathsf{HSP}$, great and thank you!)
The point is this: If indistinguishability obfuscation can be constructed for all circuits from $\mathsf{LWE}$ alone, then the resulting obfuscator will be quantum-secure. Intuitively, this seems to yield the following, simple and natural consequence of BPR's result/proof + the conjectured security of $i\mathcal{O}$ from $\mathsf{LWE}$ + the quantum-hardness of $\mathsf{LWE}$:
$\bullet$ Quantum computers cannot efficiently find Nash equilibria in the worst-case.
$\underline{\rm Question}:$ What, if any, consequence would the quantum hardness of finding Nash equilibria have? Is this an expected or unexpected outcome? Does anything overly weird occur, which we did not already observe simply from our implicit settling of $\mathsf{P}\ne\mathsf{NP}$ in order to allow a cryptographic assumption like $\mathsf{LWE}$ in the first place?
