BAYC says it was following security best practice, and yet someone gained control of its Instagram account.