If they knew about CA obtaining this data in 2015 and sat on it then, no telling what information they may be sitting on now. Most companies, when they learn o

If they knew about CA obtaining this data in 2015 and sat on it then, no telling what information they may be sitting on now. Most companies, when they learn of a data breach, they take measures to notify their affected users (whether contacting them directly, or publicizing it). Instead, FB's saying, "Here's a tool at the top of your feed, you can check the safety of our data yourself". (And fat lot of good that'll do people who don't even use FB.) This lets them continue to do business as usual, putting the onus on users to safeguard their privacy, while they can stick their heads in the sand.