Military GPS signals (P-code and future M-code) are encrypted, so spoofing is somewhat less of a concern for the military. See https://en.wikipedia.org/wiki/GPS_signals#Precision_code and https://en.wikipedia.org/wiki/GPS_signals#Military_.28M-code...
Outside of the military, both academia and industry are well aware of the potential for spoofing of civilian GNSS signals and have been developing proof of concept attacks and countermeasures for quite some time. See, for example, http://gpsworld.com/inexpensive-hack-spoofs-gps-in-smartphon... and https://www.ion.org/publications/abstract.cfm?articleID=1478...
But you should know that the various space-based positioning systems (GPS, GLONASS, BeiDou etc) are deployed and administered by the respective governments of their countries of origin. They were invented for the military and can be selectively disabled or degraded for civilian users.
Does anyone think it's possible for non-governments to stand up replacements for these systems, from either a technical or legal / political perspective?
From a technical perspective it's not hard at all, but corporations are probably leery of launching (no pun intended) such a business.