MAX rejects the allegations, deeming the analysis “a fake,” but a Russian digital rights group could also confirm most of the security claims. Here’s how to stay safe.