they don't have to be above the law. laws don't matter until you litigate. the dtcc is insulated by preemption. everything the dtcc does is explicitly approved by and subject to the ongoing oversight of the SEC. throw the "self regulated" license to steal component into the mix, and you have the "perfect storm" (lol) of invulnerability. imo