Researchers say revelations that police deployed NSO cyberweapon expose an organization in urgent need of oversight