Neither... Both...
It is the continued failure of governments to have enough clever people to understand what everyone else in the economy is actually doing.
If the SEC, FCA et al actually *understood* CDOs, they would have regulated against them. Take some debts you *know* will default...