Web portal leaves kids' chats with AI toy open to anyone with Gmail account