Findings undercut pledges of NSO Group and Intgellexa their wares won’t be abused.