My take is that low level security improvements like GrapheneOS's exploit protections will be crucial when defending against these (un)known vulnerabilities. A smaller attack surface has less exploitable vulnerabilites, known or unknown.
It's the larger, worldwide infrastructure that will be hacked and exploited and cause actual societal problems. The software industry should adopt an actual security focused mindset, as mentioned in this blog post: https://kerkour.com/rust-supply-chain-nightmare
One thing that strikes me is the difference of mindset between the aeronautic world and the software industry. Incidents and accidents are taken very seriously in the aeronautic world and everything is an opportunity to learn from mistakes (especially others' mistakes) to avoid the loss of life or expensive aircraft. They have mastered the art of continuous learning and improvement. On the other hand, it seems that incidents like the supply chain attacks mentioned above are taken very lightly in the software industry, with very small improvements over the years that usually don't address the root causes of the problems. I think that tech people could learn a lot from the aeronautic industry