This is a quite a subject regulations, but to make it short, as long as the wallet is not involved mankind do not move. Why should they (risk of a security issue cost disclosure versus the cost of implementing what's necessary to prevent it)? They still make money. It was, it is and it will be that way.

And restricting the "wallet" is not also the solution. Who's going to pay in the end?