Fewer controls apply to research done by private companies with private money, and if the research is not on a drug or device that is federally regulated, it may be subject to no formal controls beyond the risk of liability.
Already, companies in regulated industries can get packages that monitor the rest of the consumer device for proprietary material (something one hopes they warn employees about).