It's not so much about requirements (at their level), but more about, the less "potential risks you can point" the more serious investors you will attract. That is usually a easier "pass" to regulators or highly regulated companies.

For one reason VISA has one of the best PCI compliant process that itself it's so expensive to maintain that makes hard for any other competitors to face to margin profits when having to do the same.

I highly hope that things like PCI compliance become blockchain based, which will basically streamline the process and lower the costs of it, making it automatically visible to everyone if someone is being compliant or not. Making it easier for startups to be very risk-free and mature way faster than what they have to face currently if attempting the same game.

Blockchain tech has huge advantages if BIG corporations stop "forking" the work of others just to say, "it's ours" and add the desired %... the tech is here, stop copying it and say it's new, use (and improve) what is already FREE!