Those two and the lack of a robust, documented framework for Facebook to delete the data it is not interested in analyzing and store what it is securely. The b

Those two and the lack of a robust, documented framework for Facebook to delete the data it is not interested in analyzing and store what it is securely. The biggest question I have is why they needed the root to analyze popularity of future competitors. Surely doing domain requested (visible even with TLS) and number/time of requests would be sufficient, and that would have greatly reduced the amount of private data gathered.