Without laws, companies are more concerned about their bottom line before user security. And you can't blame them for that - people would rather put food on their table after all, vs something that's going to slow you down or at most cause something that causes less damage then you think.