Some regulators promise to rein in VPNs.