A critical Instagram vulnerability quietly exposed private posts to the public, raising questions about Meta’s transparency and user safety.