There is no such thing as a perfectly secure, vulnerability-free personal information management service that can accommodate the unique approaches of every nation. That’s just a fact.
Yet, we can't simply do nothing—doing so would just invite lawsuits—so the reality is that we have no choice but to use "Persona."
Switching to another company would carry its own risks; there’s really no way around it.
If I had to point a finger, the fault lies with a society that wants to foist responsibility for individual criminal acts onto the platform. There is simply no realistic way for VRChat to solve this problem perfectly. It is just a place where a multitude of people exist, much like the real world. While it might be possible to moderate rules on an instance-by-instance basis, having a single company take responsibility for managing the entire world is impossible unless they monitor absolutely everything. That is a role for the police. Or, to go any further, VRChat would have to become something akin to the police or a state authority.
We’ve likely reached the limit of what’s possible. We just have to wait for society to catch up to us—we who have effectively created a global state ahead of the curve. Then again, perhaps the right answer is to completely fragment the platform along national lines.