A new security report on AI companion apps is drawing attention because it arrives as an identity protection company is dealing with a data exposure incident.