I'm in no way knowledgeable, but when I was younger, I remember my dad, who ran compliance at a financial planning/ life insurance place, frequently complaining about how much shady shit people could get away with because it was really hard for the SEC to actually put together strong cases.