There's not that much that keeps you as a startup from thriving in a regulation heavy environment. In fact, most regulators
aren't there to kill you. They just want to know you have a plan that builds towards compliance over time.
There is admittedly a difference in the stakes and severity of enforcement in different verticals; but it's more than possible to comply. In fact, zealous compliance can actually get regulations rewritten and unmask systemic fraud/non-compliance in established actors if you do it right. Everyone should be meeting the same goals, but if you have one company struggling to honestly do so, it's a sign to look into tge mechanisms other actors have in place and whether they actually do what is on the tin. EPA learned that indirectly the hard way with Dieselgate.