We could have a sort of “Consumer Protection Agency” that broadly enforces these norms when a company feels the need to avenge themselves on someone. A sort of regulatory agency, if you will.

But the critical question is whether it would be possible to create, staff, operate, publicize, and oversee such an "agency", at a cost that is sufficiently lower than a tiny fraction of a heavy explodey thing.