In general, I agree with your sentiment, but there is one bit of nuance: "In this case, users absolutely had to provide CA with the authority to access certain

In general, I agree with your sentiment, but there is one bit of nuance: "In this case, users absolutely had to provide CA with the authority to access certain data, in the same way, they would have for any other app." Unfortunately in this case the data also included your friend list and some items about your friends that may have been marked "friends only" . This was the big mistake that Facebook is being crucified for, sadly. Like you said, they made changes to clamp things down long before any of the media knew of CA.