EU Commission’s age-verification app already presents too many security flaws