You're implying the problem is Russia or that the "attack" was somehow particularly sophisticated. It was entirely possible, using the tools Facebook provides,

You're implying the problem is Russia or that the "attack" was somehow particularly sophisticated. It was entirely possible, using the tools Facebook provides, the way those tools are intended to be used, to do extremely unethical and illegal things without Facebook intervening. If I run an unprotected server and allow people to execute arbitrary code on it it should be pretty clear that I was being reckless if it turns out after ten years that all this time script kiddies have been running elaborate botnets with it. Especially if the code examples I provide take users 90% of the way to doing that.