Maybe those specific business models shouldn't exist, if they consistently risk harm to 3rd parties.
You legally have to hold transactions for years yk as a business
Then secure your database? This stuff isn’t rocket science. You don’t even have to hold historical transactions online. It’s quite difficult for hackers to access a hard drive sitting in a drawer.