Mainstream software vendors and agencies routinely decline to serve businesses whose categories exceed their acceptable risk tolerance, regardless of whether those businesses operate lawfully.
The providers that do serve these categories frequently lack the technical depth the work requires. Solutions are assembled without genuine domain understanding or architectural investment, by firms that do not comprehend the environment they are building for.
The outcome is technology that underperforms from the start and becomes more costly over time. Sub-par systems accumulate technical debt and demand expensive remediation that still fails to meet the operational requirements of the business.