Currently this is a moral issue not a legal one - the users consented to Facebook snooping (capturing analytics) when they accepted the privacy policy and terms

Currently this is a moral issue not a legal one - the users consented to Facebook snooping (capturing analytics) when they accepted the privacy policy and terms of service when they installed the VPN and root certificates.