Public rerandomization is the annoying missing piece for mixnets and anonymous storage, because if every relay has to keep state or touch secrets, linkage leaks fast. The old ElGamal trick dies with quantum adversaries, and most lattice versions ive seen either balloon the ciphertext or hide the decryption in BFV-style rounding. Having exact decryption plus a bounded noise story is the part people can actually build on.