Researchers say that a simple weakness allowed them to access 3.5 billion profiles on the Meta-owned messaging app.