>The problem is legacy culture & systems. I'd argue regulatory oversight also makes innovation and risk taking less viable because every failure will be notice

>The problem is legacy culture & systems. I'd argue regulatory oversight also makes innovation and risk taking less viable because every failure will be noticed and require explanation, which puts a damper on "fail fast." You can fail fast internally during your SDLC but doing so in front of an external customer is an extraordinarily bad idea.