What is the primary distinction between legal compliance and ethical conduct in a US business context?