Any entity where the credit rating/report itself is  not a source of profit would be better. 

But yes, it needs government oversight. The potential for abuse and the scope of it is too great (and this lack of security is absolute abuse).