Meta launched Muse promising privacy built from the ground up. Within two weeks, a researcher found a flaw letting local malware hijack it.