Lovense, known for its remote-operated sex toys, is vulnerable to a flaw that allows attackers to reveal users’ plaintext email addresses.