I think the critical difference between US and EU here is that the regulators in EU who are supposed to protect people actually work to protect people.

The regulators who are supposed to protect people in the US work to set themselves up for their next job going to work at the companies they're currently regulating.