Definitely worse, as I already acknowledged, but not as bad as people often make it sound.

And yes, regulations alone aren't enough, they also need to be enforced. That goes for both credit (Reg Z) and debit (Reg E), though.