Chris Jenkins Comment On Regulatory Notice 21-19
Entities which are found to be breaking the law need to be punished for doing so. Failing to respond to the actions of malicious actors leads to instability in the system, an imbalance of power when there should not be one, and a loss of trust in the viability of the system itself. The punishments must be sufficient to discourage future attempts and breaking the law. If breaking the law and paying a fine is more profitable and the only consequence for breaking the law is that fine, why would anyone pursuing profit not break the law?