What you're forgetting to mention is that none of the "improvements" is due to the industry itself. ALL of it has come from government regulation and threats from legislators to ban online gambling unless the casinos clean up their act.
While this fact surely deserves to be mentioned, I think plenty of companies make good PR off complying with legally mandated measures. Doing something good is doing something good, even if you don't want to do it.
Kinda yes, kinda no. While the user account locking and several other things only happened due to regulators there are other similar issues which the industry fixed itself (e.g. intentionally delaying withdrawals which regulators did not give a fuck about but after one company offered it everyone had to) and reducing the number of sensitive documents necessary to collect (the regulators do not give a fuck about user privacy).
