How do we create laws for these contingencies? Should we list all the possible manners in which consumers shouldn't be screwed? Should we provide flexible guidelines?
It risks becoming a regulatory hell too for small developers to navigate. If regulation is weak, it risks becoming some pointless step in the way (a minor point in an EULA, or cookies-like popup) that people would ignore anyways. One way or the other, it's easy to spin as a feature: "Our VR set has a social focus (eg. we post your daily usage). For this, login in to you account is necessity". There. Now not only you need to log in, you are also publicly shamed for your usage just for them to save face.
Sadly, it boils down to human decency to make a human product.
