'Fixed' Isn't Good Enough for Payment Protection