The Census Bureau must improve its data anonymization methods to protect vulnerable groups