You have described it. We've decentralized vulnerabilities so that now, instead of waiting to pay to publish something, I just basically ride on the waves of decentralized chaos and use people's socio-psychological vulnerabilities to spread things that way.
In terms of regulation, one thing we need to think about is at what point a publisher is responsible for the information it is transmitting. If I'm The New York Times and I publish something, I'm responsible for it because I have a licence and I've trained as a journalist and could lose the credibility of being a trusted organization.
One thing the technology companies do is make recommendations. We've given them the safe provision that they're not responsible for the content that people upload, because they can't know what people are uploading. That makes sense, but increasingly, what people are watching, for example, with YouTube, 70% is driven by the recommendations on the right-hand side. Increasingly, the best way to get your attention is to calculate what should go there.
If you're making recommendations that start to veer into the billions, for example, Alex Jones' infowars conspiracy theory videos were recommended 15 billion times, at what point is YouTube, not Alex Jones, responsible for basically publishing that recommendation? I think we need to start differentiating when you are responsible for recommending things.