The algorithms are free. The $15 billion is discovery, hardware replacement and re-certification — and small institutions will not be paying it.
Three standards finalised, deadlines from September. The blocker is that nobody knows where their cryptography actually is.
Collection is confirmed and present-tense. The deadline was set by how long your data must stay secret, not by when the machine arrives.