But critics say the regulator’s new measures need to be the law rather than guidelines to make the internet safer for women and girls.