Have the regulation authorities failed, if at all they exist?

Look at it this way, if the security researcher hadn't shared these findings, the location data of the app users would still be accessible. Is there anything that can be done about such rogue companies? It is no longer safe to be online anymore.