How will new cybersecurity norms develop?

I read this article expecting it to be targeted at users' stance, not national and international level. I'm not sold on the government focusing on encryption and backdoors (outside of gov systems) and disinformation, though. At the same time, big dogs like Google and Facebook have their intrusive algorithms and people on every level between the end user and the WWW are fighting the secure fight. To answer the title question, I think it will be an ongoing echo between local internet policies, malware, and end users. More simply put, new norms have been developing since the beginning of the internet.

The answer to the question is...... slowly....and have to be often changing.