I think the obvious answer is they aren't held to account by regulators. If a few execs were sent to prison for defrauding their users (and investors for taking on so much risk) things would change overnight.