When messaging app accounts are hacked, who takes responsibility? Users or platforms?