Regulation or compliance doesn't necessarily mean security. That's a huge misconception.
Most of the hacks I've read on are related to implementation issues.
Another point to notice here is that if exchanges were regulated, how would you trust the regulators are doing their work properly?
It would require all exchanges to be open source, and at that point everyone would have their own exchange trying to earn fees from others.