A weeks-long “misuse” of the simplified payment address system used by Australia’s major payment providers has been branded as a vulnerability at the heart of the country’s instant payments platform, but experts are divided on how serious the flaw is.