The 115-page filing says weak access controls at WhatsApp fell short of legal obligations under Meta’s 2020 FTC privacy order.