Scam sites stay active for years even after being blocked: Meta’s security policy manager