I expect it's mostly uncontentious stuff: - Don't give access to other third party apps (don't act as a proxy) - Manage spam - Don't overload or reverse engi

I expect it's mostly uncontentious stuff: - Don't give access to other third party apps (don't act as a proxy) - Manage spam - Don't overload or reverse engineer [their] systems with the keys you're given - Take care of adapting to API changes and doing upgrades in a timely manner - Treat messages from Meta with a reciprocal amount of diligence Of course they might have nefarious language in there, but I would think they'd think twice before doing that for a product meant to appease regulators.