Presumably 1. the "places of work" are not doing sufficient validation, and therefore 2. regulation is needed when the non-regulated path is failing.