> when there is known way (even with some handwaving and future-tech plans) to compute a non-trivial result for a reasonable sum, such as "crack someone's private RSA key for under $10M of compute cost"

If you're willing to admit handwaving and future-tech plans, then you can be excited now. It's estimated that a few million physical qubits (corresponding to few thousand logical qubits) will be necessary to crack an RSA key. It's at least a decade away, maybe several, but few experts believe there are hard barriers to number of qubits or minimal cost.