A lot of regulations are actually a lot more reasonable than one might think and refrain from mandating any specific technical measures.
Yet, people always seem to point to regulations to justify all kinds of snake oil salesmen garbage, even if obviously unfit to fulfill the stated objective.