A year after signalling it would end the unsafe practice, the government has yet to act, leaving consumers vulnerable despite open banking being ready to roll.