The embattled company's tech exploits are 'pretty incredible' and 'pretty terrifying,' say security analysts; users are 'passive, don't have to click on anything, have no control'