The Securities and Exchange Commission (SEC) did not employ basic security measures on its X (formerly Twitter) account when it was "compromised" to spread false bitcoin ETF news, according to the social media company.