If they won't follow one set of laws, how will another set of laws reliably solve the problem? They can just disobey those laws, too. Anonymous login credentials can be de-anonymized in all kinds of ways.