"There should be limits, too, on the rights investors can sign away.