Privacy and Security Risks in the ESIM Ecosystem