I have the same question. In this case Facebook was able to identify Power acting on behalf of users because requests came from a common set of IP addresses. I

I have the same question. In this case Facebook was able to identify Power acting on behalf of users because requests came from a common set of IP addresses. If Power had instead provided users with software to run from their own devices would that change anything? In both situations this is user authorized behavior and the ability of Facebook to identify an involved service as assisting users should be irrelevant.