UK government exempting itself from flagship cyber law inspires little confidence