> And "munitions" (e.g. what encryption algorithms used to be) can be traded hardly anywhere.

That regulation is only in place to protect the established players ... and to ensure the CIA decides who gets the weapons.