The EU’s age verification app is under fire after researchers revealed simple methods to bypass its protections in minutes.