A hidden automorphism cuts the search space in half, which is huge here.

> roughly halving the scheme’s effective security strength That’s attack cost, not a proof of 128-bit to 64-bit security collapse.