I think there is a possibility that the NSA doesn't know much more about ECC than the open crypto community.

However, I think there is a decent chance that the NSA does know more about post-quantum cryptography than the open crypto community.

If post-quantum algorithms are used alone, everyone is playing into the NSA's strengths and gives them the ability to break encryption, that they would not have today with ECC.

Given that we are still some ways off from quantum computers that can actually break ECC, we would be trading security now for insecurity now.