If a regulator can't be arsed to bother writing the report themselves, what makes you think they are carefully reviewing the findings in the report before rubber stamping it? What makes you think there aren't errors of omission? Who is verifying what they write in the report is the truth?

This system would only work if the company in question was trustworthy enough to not need regulation in the first place. In the real world it will never work.