It's a failure story of regulation because the regulation was bad, and took forever to get changed.

I don't mind if government software has to use Dual_EC_DRBG - let the government hack itself. I do care if you get prison time for using a secure random number generator.