A flaw that no one’s talking about could kill Facebook