That's the main reason to not use these services. Regulations are in place but companies ignore them. How, exactly, are regulations protecting you when companies refuse to implement any security measures?

You don't find out they've ignored the regulations until its too late.