I don't think regulation helped any of the banks with high profile credit card hacks recently. Don't confuse regulation with security. Regulation is not necessarily in place to provide security for the end user, only barriers to entry. Once you do start to grow obviously the correct precautions should be taken.