How loot boxes hooked gamers and left regulators spinning