As Temu takes on fraudsters, its own alleged data privacy abuses loom large