I think we fundamentally disagree on these ideas, and that’s ok.
“Implementing systems that are not vulnerable to attack” is an impossible task. And passing KYC legislation doesn’t preclude anyone from hardening their system and I didn’t read any signs that the government plans to leave any of its systems unhardened.