Multiple US states, France, Germany and the UK are going to make the web unnavigable unless you type your credit card number or scan your face for age verification in two out of every three sites.
We are going to need to at least try to create ways to secure those credentials in as zero trust model as possible.
(Note that the legislation is a disaster, but it is done. Nobody paid enough attention. It has passed or will pass in weeks.)
A fresh web doesn't exempt you from the legal requirements unfortunately.
This year has seen the biggest state attacks by legislators on any electronic distribution of speech across most Western states for fifty years, and by and large the technology community has completely failed to even engage with that never mind stop it. We are all going to have to live with the consequences for decades.