"Might not state securities regulators enter the scene on their own, if they find something amiss? Would they have to wait for a shareholder or a board member to bring suit?" - highly doubtful, IMO. These agencies are strained already going after nefarious/criminal actors. Some shareholder/investor dispute is not worth their time.