“While we agree with the government’s aim to protect vulnerable consumers from unscrupulous lenders, the one-size-fits-all approach for all lenders and all loan types means banks don’t have the same discretion or flexibility they used to.”