Google sold Android phones with a big security risk