A law professor explains New York's probe into Apple's response to the bug and the difference between privacy and security issues under consumer-protection regulations.