No message, profile, or other data exposed—but SMS remains a weakness.