A critical logic flaw in Instagram's web-based password reset flow exposed fully unredacted email addresses and phone numbers for any...