Maybe, but I guess the key question is whether facebook has standing and a duty to make that decision on behalf of their users' privacy, or if it should be left

Maybe, but I guess the key question is whether facebook has standing and a duty to make that decision on behalf of their users' privacy, or if it should be left up to the user. Whether or not we trust facebook is relevant to that argument. If we don't buy that this is necessary for facebook to intervene and defend user privacy, the only conclusion I can come with is that they are making this decision because of a threat to their business. And I can't see much of a difference between "we should let the users share their information with Facebook for a better experience on the platform" with "we should let users share their information with NYU to power publically available research in ad targeting"