Secure chat darling Matrix admits pair of 'high severity' protocol flaws need painful fixes