You are 100% correct. Duration matching is one problem, but excess loans without any matching is the problem and bank failure , or the implied threat of failure by a bank run , is the solution IMO. No regulation, because that becomes regulatory capture, just caveat emptor. Learn the hard way!