Memo says cybersecurity office deemed WhatsApp a high risk due to ‘lack of transparency in how it protects user data’