How Paul Moore broke the EU age verification app in 2 minutes, the 8 confirmed vulnerabilities and the emergency patch 24 hours later. Full analysis.