If we someday want to replace quantum-vulnerable ECC, we want something compact, flexible and fast. Isogenies seem like the only candidate so far: 66 byte pubkeys, 148 byte sigs. I wrote a thing explaining isogenies, aimed at people who already know ECC. https://conduition.io/cryptography/isogenies-intro/