I actually think that this could be a privacy _saving_ measure instead of a privacy leaking one, because if it was packaged as an app hosting service it could b

I actually think that this could be a privacy _saving_ measure instead of a privacy leaking one, because if it was packaged as an app hosting service it could be sandboxed much more straightforwardly. For example, today, if you want to monitor FB comments on a user's open graph action, you have to request notifications for every time a user's entire wall changes and then scrape their entire wall to find out what changed. Do I care about all the other crap that happens on a user's wall? Nope. Can I ask for updates only on my apps activity? Nope. Thus you're stuck asking for much more access than you actually want/need simply since the privacy is poorly designed.