PHPSESSID is a server generated session cookie. If your server is on PHP7.3+ you can set samesite and secure parameters for it in php.ini
Along the lines of:
session.cookie_samesite="Lax" (or "None" or "Strict")
As for the topic question, yes, once it becomes a requirement, all cookies will need changing,...