I don't see how it's reasonable for Facebook to enable an app that advertises itself to users as a simple "academic survey" to harvest the private data of not o

I don't see how it's reasonable for Facebook to enable an app that advertises itself to users as a simple "academic survey" to harvest the private data of not only those users but all of their friends as well. Is it so unreasonable for users to expect that their data would not be harvested by a survey app installed by an online "buddy" who they may have never even met in person? Also I think the analogy the lawyers brought up is misleading. Instead of renting out an arena, it's more like just one of those friends accepted a 1000-page terms of service a couple decades ago for a random forum, and instead of "rebroadcasting" what's "disclosed" at one party, it's more like the forum is now publishing their per-minute GPS location for the past year.