Social media companies engaged in 'vast surveillance,' FTC finds, calling status quo 'unacceptable'