Plus: A duplicitous bug bounty scheme, the iPhone’s new lockdown mode, and more of the week’s top security news.