This seems like a case similar to the Google WiFi data collection. Code written for one reason was reused in a different project without understanding what it w

This seems like a case similar to the Google WiFi data collection. Code written for one reason was reused in a different project without understanding what it would do. Here’s an example page from 2011 talking about facebook’s old feature to import contacts via providing them your email username and password. This was at a point when many web mail services didn’t offer an OAuth API to do this, so it did make some sense at the time. It was still safer to do a csv export and then import, but much easier for users to provide the password directly. https://www.techwalla.com/articles/how-to-import-contacts-to-facebook https://www.techwalla.com/articles/how-to-import-contacts-to... > Type your email address and password for the Web-based email or instant-messaging service that you want to import into the dialog boxes and click "Find Friends."