"Of course, unscrupulous firms like Cambridge Analytica are also able to access some users’ personal data by finding exploits in Facebook’s policies." The "uns

"Of course, unscrupulous firms like Cambridge Analytica are also able to access some users’ personal data by finding exploits in Facebook’s policies." The "unscrupulous firms" did not find an exploit in Facebook's policies. Facebook designed those policies so that 3rd-party developers had access to user's data, and they knew it since the very beginning.