The Nothing CMF watch app was also discovered to have security flaws