New research says TikTok can track every character its users type—anytime they use the web browser inside the app.