A regulator has been accused of a “lack of ambition” over the Online Safety Act, with one charity warning that tech sites can do less on safety and still comply with the new rules because of a “checklist” approach.