Patients getting cosmetic procedures were left potentially exposed after Dr Barbagallo continued practising without mandatory insurance for almost two years.