First, as to the title, should everyone become security professionals? No, when you add "professionals." Not everyone needs to get a CISSP. Not everyone is going to manage security, or consult on it, or advise.
But, yes, as @denbesten has pointed out, everyone needs to be able to manage their own security, and their own risks, as they go through life. And the level of knowledge that is needed is, at the moment, basically defined as "more than they currently know." It's rather galling, as a security curmudgeon, to look around at society, and back over the past few decades, and note that we live in a society increasingly (and usually critically) dependent upon science and technology, and to note that the proportion of the population that actually understands the technology is not only not growing, it seems to be shrinking. The vast majority of the population not only considers technology as a sort of magic, but appears to be positively proud of being ignorant of it!
(I rather like the sentiment of the cartoon that seems to be associated with the article, promoting the idea of personal responsibility.)
Right. The article itself. Well, it seems to dwell very heavily on being able to assess lies and misinformation on the Internet and social media. And, yes, I would generally agree with the sentiment: one of the things that people need to be able to do, with greater accuracy and facility, is figure out when they are being lied to. It's important to politics (and, in that regard, one helpful resource is the Pro-Truth Pledge project) as portrayed in the article, but it's also important for those trying to avoid viruses, drive-by downloads, phishing, advance fee frauds, and all kinds of other dangers that are all too prevalent in our society.
(Being a security curmudgeon means constantly being embarrassed by your friends and family, like the time that my mother walked into the biggest security conference in the city and admitted that she had just been phished, or the two [TWO!] times that my father-in-law very narrowly avoided being victimized by the grandparent scam. One is constantly reminded of the various attempts to create an "Internet Driving Licence" and, even though I know there is pretty much a zero chance that one will actually come to pass, I have to have sympathy for the motivation behind the idea.)
But there are plenty of other instances of security, that the article doesn't even touch upon, that should be in the toolkit of every single user. (When was the last time you made a backup? Go ahead, you can go do it now. The article will still be here when you get back.)
(There. Don't you feel better?)
And, yes, this issue of security awareness, and how far we have to go, and what is a basic necessary syllabus, is a constant discussion in our field. (And thank you, @CraginS, for providing the full title, although, given the shortcomings of the search function on the "community" it is almost easier to search Google with "site:community.isc2.org" as a term, and it would have been nice if you had actually created a link to the NIST NICE discussion.)
In regard to the NICE (National Initiative for Cybersecurity Education) document ("Cybersecurity is Everyone’s Job") (and, for those who get caught by the breakage of the other discussion's links, here's a link to the NIST NICE page for the document), it's nice, but it's not great. It's a fairly banal and pedestrian security awareness document, and I doubt that it will interest anyone in a) reading it, b) thinking about it, c) finding out more about information security, or d) changing their behaviour in any way. We see all too many of these efforts: well-meaning, yes, but not written in such as way as to make any difference.
For example, every section of the book/pamphlet, under the "What we all should do" part, mandates "Do not use public Wi-Fi without VPN." What, never? Now, I assume we can all agree that it is probably best not to log into your company's back end research repository from unsecured public wifi in a coffee shop in [a country which will not be named but is infamous for surveillance of its own citizens and particularly foreigners]. But never using public wifi at all? Even for a Google search, or using a map app? I mean, there are some variations in importance, here. (And we've got another discussion on some possibilities elsewhere on the "community.")
If you want an example of a guidebook that might have a chance, I'd suggest you look at "Information Security Awareness Basics," written by Fred Cohen. Fred's books are all rather odd, at first glance. They are never what you expect. Which is good: we've seen all kinds of books that don't work, so doing something different stands a chance of succeeding. In this case, Cohen starts out with some very simple physical security basics, like improving the security of your purse at your desk. This is a) possible for ordinary employees to do, and b) of use to them. Starting out this way gives them a reason to be interested and continue to read, and you can then start to move into some of the areas that we might consider more significant. (You've got to start where people are.)
Should everyone be a security professional? No. Should everyone know more about information security? Yes.
