Federal government departments are still allowed to advertise on TikTok despite mounting security concerns about the social media app, CBC News has learned.