Apple macOS security protections can easily bypassed with ‘synthetic’ clicks, researcher finds