But that's the point, isn't it? It's fair game if FB does it to their own data, but if they're being scraped by a company that makes the news, they might decide

But that's the point, isn't it? It's fair game if FB does it to their own data, but if they're being scraped by a company that makes the news, they might decide to revoke their API keys or otherwise use technical or legal ways to limit their access.