Improved institutional safeguards and tighter rules can lower national exposure, but the day-to-day burden of staying safe is shifting further onto smaller businesses.