The bug allowed a researcher to uncover restoration cellphone numbers of practically any Google account.