Someone elsewhere made a great point that I'm wrestling with. There are totally legitimate uses of friend-data for an API client, such as a custom news feed. A

Someone elsewhere made a great point that I'm wrestling with. There are totally legitimate uses of friend-data for an API client, such as a custom news feed. Apps on Windows have access to pretty much everything. There are legitimate reasons for that. It could be abused. When a Windows app misbehaves, abuses the trust the users have placed in it, we don't blame Windows. We blame the app. Why then, in FB, in the same situation, have we mostly blamed FB?