Security researchers discovered that Recall stored screenshots locally in an unencrypted SQLite database, sparking privacy controversy, after which Microsoft changed it to require users to actively enable it and added Windows Hello verification, encryption, and sensitive content filtering