it's easy to get away with stuff like this in the crypto space because there are no required regulations to follow.
now, I don't think regulations will solve anything, as there are always ways to skirt around them and they are not always created with the best/most altruistic intentions. but it's certainly an opportunity for legitimate businesses to set a standard of quality and transparency for the sake of their users and investors.