It seems to me that they are planning to restrict what an application can see about users, but what about what an user can take from her friends. Can a bad acto

It seems to me that they are planning to restrict what an application can see about users, but what about what an user can take from her friends. Can a bad actor like Kogan harvest private information by using fake profiles or even some famous people with lot of friends? It seems to me that the problem is much worse than it seems, like a fundamental flaw in this particular social network, if everything becomes an island how users are going to network?