A staggering security oversight in Meta's AI support chatbot allowed attackers to bypass verification entirely.