I think your points get right approaches basically. But, firstly, you require radical trnsparency especially at the stage of policy making. On the other hand, government may plan for example, countermeasures against foreign disinformation. These policy may depend on actual situation of disinformation.