A new investigation into Microsoft's controversial Recall app shows that its new security features are flawed, and it can still capture sensitive data.