Security flaws found in Xiaomi phones’ trusted environment could have affected over 1 billion users