Tumblr May Have Waited Weeks to Fix iOS Flaw