"We need to find ways to combat at the very least the state-sponsored disinformation campaigns"
Require each account to have unique ID verification in order to confirm that it's a real person. Government can provide this service if there's concerns about user data. Allow users to post under a fake name in order to protect open speech, the only requirement is that it's a real person. This removes the bots. Foreign govts can still co-opt real people's IDs but it would be much harder for them.