This ought to be an object lesson in not cheaping out on hiring good developers and architects to run sensitive projects like this.
Alas instead it's seen as an opportunity to push the risk on to developers.
With this kind of response and IR35 coming up I can foresee more TSBs happening.