When the Higher Education and Research Act 2017 was being introduced, the Department for Education (DfE) promised that its new regulator would use its powers to protect students.