In this case, the laws probably need to apply universally. But scale matters. Systems (even economic systems) at scale have different characteristics than tho

In this case, the laws probably need to apply universally. But scale matters. Systems (even economic systems) at scale have different characteristics than those that are not. Just like you'd implement a massive AWS system differently than you would a little, single Ec2 service - regulations would probably be characterized differently given the scale and power of the entities involved. One major difference is risk mitigation: individual consumers may have some power to influence a mom and pop shop, especially one that has a physical retail presence. A negative local news highlight could make a big difference. A single legal grievance could have consequences. There's material risk. At a certain scale, it seems some of these entities simply don't have to worry about fraud, because 'who's gonna do something about it?'. The only public recourse is public institutions.