Facebook Exposes Nonprofits to Donors—And Hackers