Text this: On the (In-)Security of the Shuffling Defense in the Transformer Secure Inference