Instagram’s download your data tool exposed users’ passwords to public view