I asked an early-stage investor for a startup compliance horror story. What I got instead was a warning sign