It is simultaneously true that:

1. many countries have higher regulatory burden than the US

2. that does not mean regulatory gaps don't exist

The person above was simply pointing out that litigation is not the only way to solve a problem. Which is plainly true, you can simply require compliance via other legal means. For example, a government could create a regulatory standard for security and require vendors to follow it. Whereas in the US the political appetite is to be more hands-off and allow people make vulnerable products if the market allows.