We are already going through the "digital duty of care" act now.

https://www.aph.gov.au/Parliamentary_Business/Bills_Legislat...

It applies a 'duty of care' to 'online services', which include 'internet carriage services', 'social media', 'relevant electronic services', 'hosting services', 'search engine services', generative AI services, among others. And for encrypted messaging (which would probably come under 'social media' or 'relevant electronic services'), it only excludes 'lawful communications occurring in private solely between consenting adults'.

And the other big thing is it gives approved researchers authority to use sock puppet identities in contravention of any 'agreement, contract or deed', and gives them immunity from civil consequences.

Reliable sources inform me that the government is never going to abuse this act.