Security experts flag a Coinbase Commerce page prompting users to input wallet recovery phrases, potentially exposing them to phishing attacks.