Often abbreviated to simply "Regulation is hard." Or "Security is hard"