"That advice also found Robodebt was illegal, but it was left in draft form, which meant it did not need to be acted on".

It was left in draft form!Ha ha!(So familiar, so Greek, so universal!)

"In a hypothetical scenario, where criminal conduct is disclosed, the matter must be proven in accordance with criminal law procedures. And it must be proven again, afresh in that very separate and different context".

It must be proven again!

And of course, "Unless we do something, it could happen again".

Yes, it could. Yes, it can.

Tragicomic. :-/